Honeypot attack session (period 2021_2022), commands issued:
ls
pwd
cd ..
cd home
cd phil

MITRE ATT&CK techniques observed:
T1083 File and Directory Discovery