Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Threat Group-3390 ran a command to compile an archive of file types of interest from the victim user's directories.