The Lapsus$ group executed unauthorized scripts on the compromised system, attempting to escalate privileges within the support system. This activity is consistent with their known tactics for gaining higher access.