Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: During the 2016 Ukraine Electric Power Attack, Sandworm Team checked for connectivity to resources within the network and used LDAP to query Active Directory, discovering information about computers listed in AD.