Linux Awk Indirect Command Execution
Detects awk one-liners invoking system/exec, a common LOLBIN-style execution guardrail bypass. For example, using environmental variables where an attacker modifies the environment variable to point to a malicious binary.
Sigma
