record_type:TXT (answer:IEX* OR answer:Invoke\-Expression* OR answer:cmd.exe*)