Skip to main content

🔍 Risk & Compliance: Searches

Brandon Langley
Updated
  • Smart Search Config

    • Tried and tested Find Passwords in Plaintext Passwords!!

    name.text:password AND type:file AND extension:txt

    Passwords and Configuration Files

    The below search assumes:

    • extension: TXT, CSV, XML, JSON, INI, YAML, CONF, DOCX, PDF, LOG

    • name: <our list of interesting names>

    • type: file

    extension:(txt OR csv OR xml OR json OR ini OR yaml OR conf OR docx OR pdf OR log) AND name:(*password* OR *config* OR *configuration* OR *setting* OR *credentials* OR *key* OR *secret* OR *auth* OR *token* OR *access* OR *profile* OR *environment* OR *parameter*) AND type:file

    Taxes

    • Sometimes users store sensitive personal information on company storage

    • Example of tax return forms that may have been downloaded or uploaded

    • The following search has found large amounts of results at real world Diskover customers

    name.text:(taxes OR tax OR return OR signed) AND type:file

    Contracts and Legal Documents

    The below search assumes

    • extension: DOCX, PDF, RTF, TXT, ODT, DOC, WPD, HTML, JPEG (scanned), PNG

    • name <our list of interesting names>

    • type:file

    extension:(docx OR pdf OR rtf OR txt OR odt OR doc OR wpd OR html OR jpeg OR png) AND name:(*employment* OR *contract* OR *johndoe* OR *nda* OR *agreement* OR *companyx* OR *suppliery* OR *lease* OR *property123* OR *service* OR *clientxyz* OR *partnership* OR *abccorp* OR *term* OR *condition* OR *update* OR *confidentiality* OR *consultant123* OR *vendor* OR *tech* OR *data* OR *processing* OR *client123* OR *legal* OR *opinion* OR *trademark* OR *issue*) AND type:directory

    Internal Memos and Reports

    The below search assumes:

    • extension: DOCX, PDF, TXT, RTF, ODT, DOC, WPD, HTML, MD (Markdown)

    • name: <our list of interesting names>

    • type: file

    extension:(docx OR pdf OR txt OR rtf OR odt OR doc OR wpd OR html OR md) AND name:(*memo* OR *report* OR *summary* OR *internal* OR *meeting* OR *briefing* OR *status* OR *update* OR *minutes* OR *progress* OR *review* OR *team* OR *department* OR *overview*) AND type:file

    Financial Data

    The below search assumes:

    • extension: XLSX, CSV, PDF, DOCX, XLS, ODS, XML, QIF (Quicken), OFX (Open Financial Exchange), SQL

    • name: <our list of interesting names>

    • type: file

    extension:(xlsx OR csv OR pdf OR docx OR xls OR ods OR xml OR qif OR ofx OR sql) AND name:(*financial* OR *budget* OR *report* OR *balance* OR *statement* OR *invoice* OR *expense* OR *revenue* OR *forecast* OR *account* OR *ledger* OR *cash* OR *payment* OR *transaction* OR *tax*) AND type:file

    Personal Information

    The below search assumes:

    • extension: CSV, XLSX, DOCX, PDF, JSON, XML, TXT, ACCDB (Access Database), SQL, VCF (vCard)

    • name: <our list of interesting names>

    • type: file

    extension:(csv OR xlsx OR docx OR pdf OR json OR xml OR txt OR accdb OR sql OR vcf) AND name:(*personal* OR *contact* OR *address* OR *phone* OR *email* OR *profile* OR *client* OR *employee* OR *user* OR *customer* OR *personnel* OR *individual* OR *member*) AND type:file

    Data Analysis and Statistics

    The below search assumes:

    • extension: XLSX, CSV, R, SPSS, STATA, SAS, PDF, DOCX, SQL

    • name: <our list of interesting names>

    • type: file

    extension:(xlsx OR csv OR r OR spss OR stata OR sas OR pdf OR docx OR sql) AND name:(*analysis* OR *data* OR *statistics* OR *study* OR *report* OR *research* OR *findings* OR *survey* OR *results* OR *trend* OR *model* OR *evaluation* OR *metrics* OR *assessment*) AND type:file

    Strategic Plans and Confidential Presentations

    The below search assumes:

    • extension: PPTX, PDF, DOCX, TXT, ODP, HTML, Keynote, JPEG (scanned), PNG (scanned)

    • name: <our list of interesting names>

    • type: file

    extension:(pptx OR pdf OR docx OR txt OR odp OR html OR keynote OR jpeg OR png) AND name:(*strategy* OR *strategic* OR *plan* OR *confidential* OR *presentation* OR *roadmap* OR *objective* OR *goal* OR *proposal* OR *initiative* OR *vision* OR *mission* OR *executive*) AND type:file

    Customer and Employee Information

    The below search assumes:

    • extension: CSV, XLSX, DOCX, PDF, SQL, ACCDB, XML, JSON, VCF, TXT

    • name: <our list of interesting names>

    • type: file

    extension:(csv OR xlsx OR docx OR pdf OR sql OR accdb OR xml OR json OR vcf OR txt) AND name:(*customer* OR *employee* OR *user* OR *client* OR *personnel* OR *staff* OR *worker* OR *user profile* OR *contact* OR *user data* OR *client info* OR *address* OR *profile* OR *member*) AND type:file

    Scanned Documents and Images

    The below search assumes:

    • extension: JPEG, PNG, PDF, TIFF, BMP, GIF, SVG, DOCX (embedded images), PPTX (embedded images), ZIP (containing images)

    • name: <our list of interesting names>

    • type: file

    extension:(jpeg OR png OR pdf OR tiff OR bmp OR gif OR svg OR docx OR pptx OR zip) AND name:(*scan* OR *document* OR *image* OR *photo* OR *picture* OR *graphic* OR *diagram* OR *chart* OR *illustration* OR *blueprint* OR *drawing* OR *report* OR *presentation*) AND type:file

    Database Dumps and Queries

    The below search assumes:

    • extension: SQL, CSV, JSON, XML, ACCDB, MDB (Access Database), DBF (dBase), SQLite, Postgres, MySQL

    • name: <our list of interesting names>

    • type: file

    extension:(sql OR csv OR json OR xml OR accdb OR mdb OR dbf OR sqlite OR postgres OR mysql) AND name:(*dump* OR *query* OR *database* OR *backup* OR *export* OR *data* OR *sql* OR *report* OR *dataset* OR *schema* OR *table* OR *record* OR *entry*) AND type:file

    Smart Search Config

    !passwords_and_config_files|extension:(txt OR csv OR xml OR json OR ini OR yaml OR conf OR docx OR pdf OR log) AND name:(*password* OR *config* OR *configuration* OR *setting* OR *credentials* OR *key* OR *secret* OR *auth* OR *token* OR *access* OR *profile* OR *environment* OR *parameter*) AND type:file
!contracts_and_legal_docs|extension:(docx OR pdf OR rtf OR txt OR odt OR doc OR wpd OR html OR jpeg OR png) AND name:(*employment* OR *contract* OR *johndoe* OR *nda* OR *agreement* OR *companyx* OR *suppliery* OR *lease* OR *property123* OR *service* OR *clientxyz* OR *partnership* OR *abccorp* OR *term* OR *condition* OR *update* OR *confidentiality* OR *consultant123* OR *vendor* OR *tech* OR *data* OR *processing* OR *client123* OR *legal* OR *opinion* OR *trademark* OR *issue*) AND type:directory
!internal_memos_and_reports|extension:(docx OR pdf OR txt OR rtf OR odt OR doc OR wpd OR html OR md) AND name:(*memo* OR *report* OR *summary* OR *internal* OR *meeting* OR *briefing* OR *status* OR *update* OR *minutes* OR *progress* OR *review* OR *team* OR *department* OR *overview*) AND type:file
!financial_data|extension:(xlsx OR csv OR pdf OR docx OR xls OR ods OR xml OR qif OR ofx OR sql) AND name:(*financial* OR *budget* OR *report* OR *balance* OR *statement* OR *invoice* OR *expense* OR *revenue* OR *forecast* OR *account* OR *ledger* OR *cash* OR *payment* OR *transaction* OR *tax*) AND type:file
!personal_information|extension:(csv OR xlsx OR docx OR pdf OR json OR xml OR txt OR accdb OR sql OR vcf) AND name:(*personal* OR *contact* OR *address* OR *phone* OR *email* OR *profile* OR *client* OR *employee* OR *user* OR *customer* OR *personnel* OR *individual* OR *member*) AND type:file
!data_analysis_and_statistics|extension:(xlsx OR csv OR r OR spss OR stata OR sas OR pdf OR docx OR sql) AND name:(*analysis* OR *data* OR *statistics* OR *study* OR *report* OR *research* OR *findings* OR *survey* OR *results* OR *trend* OR *model* OR *evaluation* OR *metrics* OR *assessment*) AND type:file
!strategic_plans_and_presentations|extension:(pptx OR pdf OR docx OR txt OR odp OR html OR keynote OR jpeg OR png) AND name:(*strategy* OR *strategic* OR *plan* OR *confidential* OR *presentation* OR *roadmap* OR *objective* OR *goal* OR *proposal* OR *initiative* OR *vision* OR *mission* OR *executive*) AND type:file
!customer_and_employee_info|extension:(csv OR xlsx OR docx OR pdf OR sql OR accdb OR xml OR json OR vcf OR txt) AND name:(*customer* OR *employee* OR *user* OR *client* OR *personnel* OR *staff* OR *worker* OR *user profile* OR *contact* OR *user data* OR *client info* OR *address* OR *profile* OR *member*) AND type:file
!scanned_docs_and_images|extension:(jpeg OR png OR pdf OR tiff OR bmp OR gif OR svg OR docx OR pptx OR zip) AND name:(*scan* OR *document* OR *image* OR *photo* OR *picture* OR *graphic* OR *diagram* OR *chart* OR *illustration* OR *blueprint* OR *drawing* OR *report* OR *presentation*) AND type:file
!database_dumps_and_queries|extension:(sql OR csv OR json OR xml OR accdb OR mdb OR dbf OR sqlite OR postgres OR mysql) AND name:(*dump* OR *query* OR *database* OR *backup* OR *export* OR *data* OR *sql* OR *report* OR *dataset* OR *schema* OR *table* OR *record* OR *entry*) AND type:file

    Related articles

    Comments

    0 comments

    Please sign in to leave a comment.

    Powered by Zendesk