Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: POSHSPY appends a file signature header (randomly selected from six file types) to encrypted data prior to upload or download.