Suspicious Invocation of Shell through AWK - Linux (via process_creation)

This rule detects the execution of "awk" or it's sibling commands, to invoke a shell using the system() function. This behavior is frequently linked with attempts to execute arbitrary commands or escalate privileges, potentially leading to unauthorized access or further exploitation.