has stolen domain credentials by dumping LSASS process memory using Task Manager comsvcs.dll and from a Microsoft Active Directory Domain Controller using .(Citation: FireEye APT35 2018)(Citation: DFIR Report APT35 ProxyShell March 2022)(Citation: DFIR Phosphorus November 2021)
Below is an instruction that describes a task, paired with an input that provides further context. Write a response that appropriately completes the request. ### Instruction: List the MITRE techniques contained in the text. ### Input: has stolen domain credentials by dumping LSASS process memory using Task Manager comsvcs.dll and from a Microsoft Active Directory Domain Controller using .(Citation: FireEye APT35 2018)(Citation: DFIR Report APT35 ProxyShell March 2022)(Citation: DFIR Phosphorus November 2021) ### Response: T1003.001.