Linux awk indirect shell execution
This rule detects the execution of the 'awk' command on Linux/Unix systems when it is used with specific command-line arguments that indicate indirect shell execution. For example, using environmental variables where an attacker modifies the environment variable to point to a malicious binary.
CQL
