During  the threat actors leveraged a custom tool to dump OS credentials and used following commands: `reg save HKLM\\SYSTEM system.hiv` `reg save HKLM\\SAM sam.hiv` and `reg save HKLM\\SECURITY security.hiv` to dump SAM SYSTEM and SECURITY hives.
Below is an instruction that describes a task, paired with an input that provides further context. Write a response that appropriately completes the request. ### Instruction: List the MITRE techniques contained in the text. ### Input: During  the threat actors leveraged a custom tool to dump OS credentials and used following commands: `reg save HKLM\\SYSTEM system.hiv` `reg save HKLM\\SAM sam.hiv` and `reg save HKLM\\SECURITY security.hiv` to dump SAM SYSTEM and SECURITY hives. ### Response: T1003.002.