During  threat actors collected a list of open connections on the infected system using `netstat` and checks whether it has an internet connection.
Below is an instruction that describes a task, paired with an input that provides further context. Write a response that appropriately completes the request. ### Instruction: List the MITRE techniques contained in the text. ### Input: During  threat actors collected a list of open connections on the infected system using `netstat` and checks whether it has an internet connection. ### Response: T1049.