Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: FIN6 has encoded data gathered from the victim with a simple substitution cipher and single-byte XOR using the 0xAA key, and Base64 with character permutation.