Honeypot attack session (period 2021_2022), commands issued:
ls
pwd
cd /home
cd phil
cd /etc
cd /proc
cd 
cd /dev
cd ..
cd bin
cd boot
cd mnt
cd opt

MITRE ATT&CK techniques observed:
T1083 File and Directory Discovery