Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: SUNSPOT was identified on disk with a filename of <code>taskhostsvc.exe</code> and it created an encrypted log file at <code>C:\Windows\Temp\vmware-vmdmp.log</code>.