Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: APT28 has used Forfiles to locate PDF, Excel, and Word documents during collection. The group also searched a compromised DCCC computer for specific terms.