NValt uses (a possibly nonstandard) markdown notation for checkboxes. So a search for unchecked would be "[ ]", checked is "[\]"