Honeypot attack session (period 2024), commands issued:
echo 1 && cat /bin/echo
head -c 2344348 > /tmp/OQjfIXVQcu
>A@/XBV'8ELFGVR
o
head -c 2344348 > /tmp/9WFenveSfY
head -c 2344348 > /tmp/2AHjkPyDz2

MITRE ATT&CK techniques observed:
T1005 Data from Local System
T1070 Indicator Removal