Honeypot attack session (period 2021_2022), commands issued:
cat /etc/issue;

MITRE ATT&CK techniques observed:
T1082 System Information Discovery
T1098 Account Manipulation