Honeypot attack session (period 2024), commands issued:
cd ~; chattr -ia .ssh; lockr -ia .ssh

MITRE ATT&CK techniques observed:
T1222 File and Directory Permissions Modification
T1070 Indicator Removal