Honeypot attack session (period 2024), commands issued:
dd if=/proc/self/exe bs=22 count=2 || while read i; do echo $i; done < /proc/self/exe || cat /proc/self/exe;

MITRE ATT&CK techniques observed: