Tag Archives: E-mail spam

Gmail advanced searching: how to create a powerful query to catch a “wanted” email – Computer forensic

Gmail QueriesIf you want to improve your Google searches you can find many useful queries on internet and, if have time, you can also attend a specific Google free course.

But just few people know that there are specific queries available for Gmail.

I found some of them casually when I need to search some specific, old emails into my accounts some days ago. Then I discovered that Google itself published a complete list of all the possible queries accepted by Gmail.

I warmly suggest you to spend some minutes reading and exploring all the queries because they are really useful when you use Gmail in a professional way.

Here, I just want to sum-up some of them that, in my experience, are the most common you can use when you are becoming crazy looking for a specific email you sent or received.

The powerful feature is represented by the possibility to mix the different queries to create super-queries that can intercept the “wanted” email or documents in a less than a second.


after:2010/10/24 before:2011/09/24

Here you are defining the time range and Gmail will show all the emails sent or received between the two specified dates.

From or To

from xyz@zyw.com

Where xyz @zyw.com is the email address you are focusing on.

from:tom OR from:Luis
from:tom OR from:Luis -meeting

In this case you are looking for an email from Tom or (plus) Luis but it hasn’t to contain (- minus) the word “meeting”.

Bcc or CC


Where xyz @zyw are specific email addresses you are looking for.


filename:(jpg OR jpeg OR png)
filename:(doc OR docx OR pdf)
filename:invitation(doc OR docx OR pdf)







And you check into a specific folder. In my case: the Spam folder

Larger or Smaller


Some complex query examples:

from:xyz@zyw.com filename:(jpg OR jpeg OR png)

to:xyz@zyw.com filename:(doc OR docx OR pdf)

from:xyz@zyw.com filename:invitationfrom xyz@zyw.com to:xyz@zyw.com filename:(doc OR docx OR pdf) subject:meeting

after:2011/10/24 before:2011/11/24 in:spam subject:meeting