Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Kessel has exfiltrated data via hexadecimal-encoded subdomain fields of DNS queries.