has changed extensions on files containing exfiltrated data to make them appear benign and renamed a web shell instance to appear as a legitimate OWA page.
Below is an instruction that describes a task, paired with an input that provides further context. Write a response that appropriately completes the request. ### Instruction: List the MITRE techniques contained in the text. ### Input: has changed extensions on files containing exfiltrated data to make them appear benign and renamed a web shell instance to appear as a legitimate OWA page. ### Response: T1036.005.