type:EXECVE "touch" ("\-t" OR "\-acmr" OR "\-d" OR "\-r")