Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Tomiris has the ability to collect recent files matching a hardcoded list of extensions prior to exfiltration.