Audit your public web presence. If you find an email.xls file—or any similarly named spreadsheet—remove it immediately. And remember: Google never forgets, but you can ask it to. Have you ever found sensitive data using Google dorks? Share your experience in the comments below (anonymously, of course).

| Operator | Meaning | | :--- | :--- | | filetype:xls | Limits results to Microsoft Excel 97-2003 files (.xls). | | inurl:email.xls | Finds pages where the URL contains the string "email.xls". |

By: Security Research Team | Reading Time: 6 minutes

In this post, we’ll break down what this search does, why it works, what you might find, and—most importantly—how to protect your organization from becoming a search result. Let’s dissect the query:

filetype:xls inurl:email.xls