Command Palette
Search for a command to run...
Regular Search
Master the fundamentals of breach intelligence gathering with LeakZero's regular search functionality. This guide covers everything from basic queries to advanced pattern matching techniques.
Understanding Regular Search
Security incidents don't wait for you to decode obfuscated results or navigate complex interfaces. Regular search gives you the clear, actionable data you need fast. Built for the reality of modern security operations where every second counts and partial data means incomplete protection.
While competitors make you wait minutes for basic queries, our search engine can process 40+ billion records in under a second. Purpose-built distributed architecture means you get answers before threats have time to spread.
Sometimes you need a scalpel, not a sledgehammer. Single-field searches cut straight to what matters, eliminating the data overload that buries critical findings in irrelevant results. Perfect for rapid threat validation when time is everything.
Search Types & Data Classification
Every attack vector has its signature. Our search types are engineered around the specific patterns attackers use and defenders need to track, from traditional credential stuffing to sophisticated identity linking attacks.
Email Address High Priority
The digital fingerprint that follows your users everywhere. Our email search cuts through aliases, plus-addressing, and domain variations to reveal the full attack surface.
Use Case: Account takeover risk assessment
Username Common
The handles that reveal patterns. Users recycle usernames across platforms, creating traceable paths that skilled attackers exploit for reconnaissance and social engineering.
Use Case: Cross-platform identity linking
Phone Number Sensitive
The most persistent identifier of all. Phone numbers outlast email addresses and usernames, making them goldmines for long-term identity tracking and SIM-swapping reconnaissance.
Use Case: SIM swapping threat analysis
Search Options & Pattern Matching
Not all threats are the same, and your searches shouldn’t be either. LeakZero lets you go pinpoint when you know what you want, or wide-open when you’re hunting unknowns.
Know what’s compromised? Exact Match gets you straight to the right results — no false positives, no maybes—just definitive answers about specific credentials or identities that matter to your investigation.
Optimal Use Cases:
- Known credential verification
- Specific identity confirmation
- Compliance and audit requirements
- Legal evidence gathering
Technical Characteristics:
- Case-sensitive matching (configurable)
- No pattern expansion or interpretation
- Fastest query execution performance
- Lowest resource consumption
Matches: [email protected]
Does Not Match: [email protected], [email protected]
When attackers target entire organizations or use predictable patterns, wildcards reveal the full scope of exposure. Discover every compromised account at a domain, map naming conventions, and uncover attack patterns that exact searches would miss completely.
Wildcard Operators:
* - Matches zero or more characters of any type? - Matches exactly one characterStrategic Applications:
- Domain-based email enumeration
- Username pattern discovery
- IP range reconnaissance
- Partial credential matching
Matches: [email protected], [email protected], [email protected]
Performance Note: Leading wildcards may impact query speed
For when basic search isn’t enough. Regular expressions handle complex validation rules, multi-format matching, and the kind of nuanced searches that reveal hidden connections other tools can't find.
Advanced Capabilities:
- Character class matching [a-z], [0-9]
- Quantifier expressions {n,m}, +, *
- Lookahead and lookbehind assertions
- Conditional matching and alternation
Professional Use Cases:
- Complex email format validation
- Phone number pattern extraction
- Credit card number identification
- Custom identifier format matching
Purpose: Validate email address format
Performance: Higher computational overhead
Web Interface Navigation Guide
Security investigations happen under pressure. Our interface eliminates friction between your expertise and the intelligence you need, with every element positioned for the split-second decisions that define effective incident response.
Search Input Field
Intelligent input validation catches mistakes before they waste precious time, while format suggestions guide you toward search patterns that actually work.
- Auto-completion for common patterns
- Format validation indicators
- Search history integration
- Paste and clear functionality
Search Type Selector
Smart categorization that understands what you're hunting. Auto-detection reads your input and suggests the right data type, eliminating the guesswork that leads to missed findings.
- Categorized type organization
- Most-used type suggestions
- Auto-detection based on input format
- Keyboard navigation support
Search Options Selector
Match your search method to the investigation phase. Clear performance indicators help you balance speed against thoroughness, with warnings when complexity might slow critical searches.
- Default intelligent selection
- Performance impact indicators
- Pattern syntax help tooltips
- Advanced option warnings
Row Limit Control
Configurable result limit with quota impact calculation and performance optimization suggestions.
- Slider with preset values
- Manual input capability
- Quota consumption preview
- Performance recommendations
Action Buttons
Primary and secondary actions for search execution and result management.
- Search execution button
- Count-only query option
- Search history access
- Reset and clear functions
Status Indicators
Real-time feedback on search progress, quota usage, and system status.
- Search progress indicators
- Quota remaining display
- Processing time metrics
- Error and warning notifications
Quick Search Commands
Skip the interface when time is critical. Quick search commands let you execute searches directly from a single command, perfect for rapid investigations and mobile usage where every second counts.
Basic Syntax
Examples
Parameters
- type: url, domain, login, username, email, phone, password
- query: The search term (use quotes for spaces)
- option: exact (default), wildcard, regex
- rows: Number or 'max' (default: 1000)
Basic Syntax
Examples
Key Features
- Up to 10 queries per command
- Separator
--or|for row limits - Individual or bulk row limit configuration
- Same search type and option for all queries
Usage
Automatically detects your last search and prompts for row limit configuration. Handles advanced search detection and offers alternatives when needed.
Smart Features
- Detects advanced searches (web-only) and offers alternatives
- Preserves original search type and options
- Interactive row limit selection with presets
- Quota validation before execution
Telegram Bot Integration
Security threats don't wait for you to get back to your desk. LeakZero's Telegram integration puts the full power of breach intelligence in your pocket, optimized for the quick checks and urgent investigations that happen anywhere, anytime.
Most Used Commands
Configuration Options
- Inline search type selection
- Pattern matching configuration
- Result limit adjustment
- Export format preferences
Interactive Results
- Paginated result navigation
- Inline result filtering
- Quick action buttons
- Direct export to cloud storage
Real-time Notifications
- Search completion alerts
- Quota threshold warnings
- New breach source notifications
- System maintenance updates
Professional Best Practices
- Verify search type selection—wrong types waste time and quota
- Start precise, expand strategically when exact matches come up empty
- Count first, search second—especially for broad patterns
- Export immediately—findings disappear when quotas run out
- Document your methodology for compliance and reproducibility
- Watch your quota like incident response budget—it matters
- Test complex regex patterns before committing resources
- Cross-reference multiple data types for complete intelligence
- Leading wildcards (*user) that crush performance and drain quota
- Regex patterns that look smart but run forever
- Case sensitivity oversights that miss half the results
- Row limits set too high because "more is better"
- Losing critical findings when quota runs out mid-investigation
- Wrong search type selection that returns garbage results
- Untested patterns that fail during time-critical searches
- Accepting results without validating their relevance
- Never share breach results—PII exposure creates liability
- HTTPS only—breach intelligence demands encrypted channels
- Lock down access controls—not everyone needs everything
- Rotate credentials like you rotate incident response plans
- Maintain audit trails—compliance teams will thank you
- Encrypt exported data—laptops get stolen, clouds get breached
- Handle PII with care—privacy violations hurt more than breaches
- Prepare incident response for when your tools get compromised
Regular search is just the beginning. When you need to correlate complex relationships, build sophisticated queries, or map entire attack campaigns, LeakZero's advanced capabilities are waiting.