=== SentinelOne ===
total 468
drwxr-xr-x  26  975 1013   4096 Jun  1 13:29 .
drwxr-xr-x. 29 root root   4096 Apr 30 12:11 ..
drwx-----T   2  975 1013   4096 Aug 19  2025 .storage
drwx-----T   4  975 1013   4096 Aug 19  2025 addons
drwx-----T   2  975 1013   4096 Aug 19  2025 agent_modules
drwx-----T   4  975 1013   4096 Jun  1 13:28 artifacts
drwx-----T   4  975 1013   4096 Jun 19 17:45 assets
drwx-----T   2  975 1013   4096 Aug 19  2025 auto_uploads
drwxr-x--T   2 root 1013   4096 Jun  1 13:28 bin
drwx-----T   2  975 1013   4096 Aug 19  2025 certificates
drwx-----T   3  975 1013   4096 Jun  1 13:28 cgroups
drwx-----T   3  975 1013   4096 Jun 27 18:48 comm_sdk
drwx-----T   2  975 1013   4096 Jun 27 18:48 configuration
drwx-----T   3  975 1013   4096 Aug 19  2025 crash_dumps
-rw-------   1  975 1013 376160 Aug 19  2025 detectors.pkg
drwx-----T   6 root root   4096 Jun  1 13:28 ebpfs
drwx-----T   2 root root   4096 Jun  1 13:29 home
drwx-----T   2 root root   4096 Jun  1 13:28 lib
drwx-----T   2  975 1013   4096 Jun 27 19:20 log
u610527+ 3181271  0.0  0.0   4256  3288 ?        S    19:37   0:00 sh -c ps aux 2>&1 | grep -i sentinel
u610527+ 3181273  0.0  0.0   3340  1932 ?        S    19:37   0:00 grep -i sentinel
/opt/alt/php-xray/php/smart-advice-plugin/cl-smart-advice/assets/images/imunify.logo.png
/opt/cloudlinux/venv/lib/python3.11/site-packages/xray/imunify_manager.py
/opt/cloudlinux/venv/lib/python3.11/site-packages/xray/__pycache__/imunify_manager.cpython-311.pyc

=== Crontab ===
sh: line 1: crontab: command not found

=== PHP modules ===
pcntl
posix
redis
sockets

=== Redis via raw PHP socket ===
XX-REDIS-XX
Redis connect FAILED: Connection refused

=== Kernel exploits check ===
Linux uk-fast-web1591.main-hosting.eu 5.14.0-611.24.1.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Jan 22 07:12:43 EST 2026 x86_64 x86_64 x86_64 GNU/Linux

DONE