has harvested data from victim's e-mail including through execution of wmic /node:<ip> process call create cmd /c copy c:\Users\<username>\<path>\backup.pst c:\windows\temp\backup.pst copy i:\<path>\<username>\My Documents\<filename>.pstcopy.
Below is an instruction that describes a task, paired with an input that provides further context. Write a response that appropriately completes the request. ### Instruction: List the MITRE techniques contained in the text. ### Input: has harvested data from victim's e-mail including through execution of wmic /node:<ip> process call create cmd /c copy c:\Users\<username>\<path>\backup.pst c:\windows\temp\backup.pst copy i:\<path>\<username>\My Documents\<filename>.pstcopy. ### Response: T1114.001.