s-mamiya

## ioc_checksessions_files.sh
#!/bin/bash
# Scan for compromised session files

SESSIONS_DIR="/var/cpanel/sessions"
COMPROMISED=0

echo "[*] Scanning session files for injection indicators..."

for session_file in "$SESSIONS_DIR"/raw/*; do
    [ -f "$session_file" ] || continue
	#!/bin/bash
	# Scan for compromised session files

	SESSIONS_DIR="/var/cpanel/sessions"
	COMPROMISED=0

	echo "[*] Scanning session files for injection indicators..."

	for session_file in "$SESSIONS_DIR"/raw/*; do
	[ -f "$session_file" ] \|\| continue