Honeypot attack session (period 2024), commands issued:
screen
ls
sudo su
apt install
install
lscpu
help
apt install screen

MITRE ATT&CK techniques observed:
T1083 File and Directory Discovery
T1548 Abuse Elevation Control Mechanism
T1105 Ingress Tool Transfer
T1082 System Information Discovery
T1059 Command and Scripting Interpreter
T1105 Ingress Tool Transfer