Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Sandworm Team had gathered user, IP address, and server data related to RDP sessions on a compromised host. It has also accessed network diagram files useful for understanding how a host's network was configured.