Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Ryuk has called <code>CreateToolhelp32Snapshot</code> to enumerate all running processes.