Honeypot attack session (period 2021_2022), commands issued:
(uname -smr || /bin/uname -smr || /usr/bin/uname -smr)

MITRE ATT&CK techniques observed:
T1087 Account Discovery