Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: RDAT has used encoded data within subdomains as AES ciphertext to communicate from the host to the C2.