Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: ECCENTRICBANDWAGON has stored keystrokes and screenshots within the <code>%temp%\GoogleChrome</code>, <code>%temp%\Downloads</code>, and <code>%temp%\TrendMicroUpdate</code> directories.