Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: GALLIUM used <code>reg</code> commands to dump specific hives from the Windows Registry, such as the SAM hive, and obtain password hashes.