Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: WindTail can invoke Apple APIs <code>contentsOfDirectoryAtPath</code>, <code>pathExtension</code>, and (string) <code>compare</code>.