Honeypot attack session (period 2024), commands issued:
/bin/bash -c "uname -a"
uname -a

MITRE ATT&CK techniques observed:
T1087 Account Discovery