Course / 10 Crypto and files / Lesson 17 of 19

Search operators on a challenge

Estimated time: 15 min reading · 15 min activity

A search asks a tool to find matching material. A search operator is syntax that narrows a query, such as requesting an exact phrase or restricting a site. An index is a tool’s searchable collection; it can omit documents that exist. Syntax and indexing rules vary by provider.

This lesson uses the supplied saved HTML page rather than a search engine. A browser’s Find searches visible text within the current page. It is narrower than searching every file in the corpus, and it need not include hidden comments. You can do the same comparison by reading the printed page text.

Before you begin

Estimated time
15 min reading, 15 min activity. Setup and optional practice may take longer.
Where you work
Use only the supplied fictional corpus: notices, source cards, saved page, image description/map and DNS/registration table. Keep work in private notes. No real-person research, live search, image upload, map lookup, contact or account is required or authorized by this exercise.
Without a lab
All evidence needed for the activity appears on this page. Copy it into notes if downloads are unavailable. Read the labeled model and predict each result; a paper trace practises the reasoning while tool operation waits for a lab. Reading needs no JavaScript. Answer checking needs JavaScript and a secure context; saving progress also needs usable browser storage.

After this lesson you can:

  • Locate the visible phrase night desk on the saved page.
  • Name the memo that still holds the words copper bell.
  • Keep provider operators out of this checkpoint.

01Example

Fresh visible-text lookup within the supplied page. This is a paper prediction, not a new browser action.

Search corpus: visible text of owned-search-corpus.html
Phrase: Room Lamp
Printed sentence: Room Lamp is down the hall from the board.
Supported: this page contains that phrase.
Unresolved: other files, hidden markup and any outside collection.

02An empty result describes the search, not the world

A search result is evidence about the method and corpus used. If the exact phrase is not on one page, that does not settle whether it appears in a separate memo or whether another document exists.

Record the searched source, phrase, scope, date of your inspection and result. A zero-result provider query may reflect an incomplete index, unsupported syntax, access restrictions or a mismatch in wording. No live provider operator is needed or launch-checked in this activity.

Record a search’s corpus and method so an empty result is interpreted within its actual limits.Model. A teaching model drawn by hand. It shows the idea, not real tool output.

Read the full explanation below.

Visible source corpusPhrase: Room Lamp

Both printed visible paragraphs only.

Visible text of owned-search-corpus.html; excludes comments, other files and outside collections

Visible sentence
The night desk keeps the spare cable in drawer 2.
Room Lamp is down the hall from the board.
Selected view

Result

The night desk keeps the spare cable in drawer 2.
Room Lamp is down the hall from the board.

The source corpus contains these two visible sentences.

Follow the explanation

  1. The source corpus contains these two visible sentences.
  2. Room Lamp matches the second sentence within this visible-page corpus only.
Read every state and value

1. The source corpus contains these two visible sentences.

View
all
Rows shown
The night desk keeps the spare cable in drawer 2. · Room Lamp is down the hall from the board.
Highlighted Cell Refs
None
Result rows
Source Row: The night desk keeps the spare cable in drawer 2.; Cells: The night desk keeps the spare cable in drawer 2. · Source Row: Room Lamp is down the hall from the board.; Cells: Room Lamp is down the hall from the board.

2. Room Lamp matches the second sentence within this visible-page corpus only.

View
room
Rows shown
Room Lamp is down the hall from the board.
Highlighted Cell Refs
Row: Room Lamp is down the hall from the board.; Column: Visible sentence
Result rows
Source Row: Room Lamp is down the hall from the board.; Cells: Room Lamp is down the hall from the board.
A search result describes the named corpus and method; no external search is performed.

03Name the memo that holds copper bell

Use the saved page and query-notes.txt as two different sources. You can compare their printed text without opening a Find box.

<!DOCTYPE html>
<html lang="en">
<head><meta charset="utf-8"><title>Night Desk saved page, fictional</title></head>
<body>
<p>The night desk keeps the spare cable in drawer 2.</p>
<p>Room Lamp is down the hall from the board.</p>
<!-- memo marker: this comment is not the visible page. -->
</body>
</html>

Download the saved fictional page

Label: search limits for the saved page. No search engine was queried.

Visible sentence: The night desk keeps the spare cable in drawer 2.
A browser Find box on this file can locate those visible words.
This lesson does not claim that Find reads HTML comments. Do not treat a comment as the page text.

Off-page memo M2, still inside the fictional packet: the words copper bell appear only in this note, not on the saved page.
Searching the saved page for copper bell returns no visible line.
Memo M2 still exists in this note. The empty Find result does not erase M2.

This card does not run a site filter or another provider operator. Their current syntax was not rechecked.

Download the search-limit note

  1. Locate night desk in the visible page sentence and record a positive match for that page.
  2. Look for copper bell in the same visible text, then read memo M2 in query-notes.txt.
  3. Write both results: no visible-page match for copper bell, but M2 contains the phrase. These claims can both be true because their corpora differ.
  4. Stop after the source-specific note. Do not run a public search or investigate a person.

04Optional challenge

In about ten optional minutes, compare searching for spare cable and copper bell on the saved page. For each, write the exact phrase, source and hit/miss result, then one limit. Keep source inspection separate from claims about all documents.

05Fresh cases for the checks

Use these fictional cases for the checks below. They have different inputs from the worked examples. Read them here or make notes; no installation or external service is needed.

Saved page card A: independent visible-text corpusOwned fixture. An original file made for this course. Follow the activity's instructions in your own lab.

Visible page text only:
P1 The copper cabinet holds the folders.
P2 The quiet archive keeps a spare key.
P3 Room Cedar is beside the stairs.
An HTML comment mentions silver hinge, but comments are outside this declared visible-text search.
No search provider is used.

Memo card B: separate local packet documentsOwned fixture. An original file made for this course. Follow the activity's instructions in your own lab.

Memo M6: review the folder list.
Memo M7: the phrase amber latch appears here.
Neither memo is part of Saved page card A’s visible text. Both remain inside the fictional packet.

Query card C: independent bounded search resultOwned fixture. An original file made for this course. Follow the activity's instructions in your own lab.

Corpus searched: only the visible text of Saved page card A.
Exact phrase: amber latch.
Result: no visible-text match.
The memo corpus was not searched by this operation.

06Explain the evidence and its limit

Optional self-check: write source, exact query, visible-text scope, result and inspection date for a saved-page search.

Review it: distinguish comments and separate memos from visible page text, bound negative results to the operation and avoid assuming live-provider syntax or index completeness.

07Common mistakes

If Find seems to have searched the whole folder, identify the actual open page and repeat the paper comparison only for that page’s visible text.

If an empty result erases M2 from your conclusion, cite M2 separately and narrow the negative claim.

If quotation marks are copied into a provider query, check that provider’s current syntax in later authorized work; this lesson supplies no live search requirement.

References

  • NIST SP 800-115

    Scope and evidence-planning background. The required method is reading the supplied page, not a live provider query.