Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: admin@338 actors used the following command following exploitation of a machine with LOWBALL malware to display network connections: <code>netstat -ano >> %temp%\download</code>