type:EXECVE (("shutdown" OR "reboot" OR "halt" OR "poweroff") OR (("init" OR "telinit") (0 OR 6)))