Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Mustang Panda has stored collected credential files in <code>c:\windows\temp</code> prior to exfiltration. Mustang Panda has also stored documents for exfiltration in a hidden folder on USB drives.