Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: ToddyCat has run scripts to enumerate recently modified documents having either a .pdf, .doc, .docx, .xls or .xlsx extension.