PwnKit (CVE-2021-4034) exploit via pkexec.so load
Detects the loading or execution of pkexec.so, which is indicative of exploitation attempts targeting CVE-2021-4034 (PwnKit). This vulnerability allows for local privilege escalation on Linux systems, including within compromised containers.
Microsoft Sentinel (KQL)

