Honeypot attack session (period 2021_2022), commands issued:
sudo -s
sd
ls
cd ..
cd medievaltop/
cd data
cd root

MITRE ATT&CK techniques observed:
T1548 Abuse Elevation Control Mechanism
T1083 File and Directory Discovery