Honeypot attack session (period 2021_2022), commands issued:
enable
sh
shell
linuxshell
system
ls /home
/bin/busybox CORONA

MITRE ATT&CK techniques observed:
T1059 Command and Scripting Interpreter
T1083 File and Directory Discovery
T1059 Command and Scripting Interpreter