Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: FIN13 has utilized the following temporary folders on compromised Windows and Linux systems for their operations prior to exfiltration: `C:\Windows\Temp` and `/tmp`.