Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: SocGholish can send output from `whoami` to a local temp file using the naming convention `rad<5-hex-chars>.tmp`.