Cybercrime & OSINT named collections
Browse research by subject, investigative application or source collection. Research categories describe a paper’s subject; investigation types describe its investigative application. Source collections identify where papers were brought together. A paper can appear in these different views.
These collections provide publication references and original source links without requiring JavaScript. For full abstracts, keyword searches and all available classifications, search the complete library.
Browse the complete library
3,283 accepted papers across all sources. Open the complete research bibliography for a publication-year listing, including papers classified as Other.
New publications
Browse approved research actually published within the last 90 days, using verified publication dates. Open new publications
Named collections
Explore papers by their recorded source collection, alongside the subject and investigation bibliographies.
- ALEX regular weekly discovery review queue — 74 papers in ALEX
- APWG.org eCrimes Research — 155 papers in ALEX
Electronic-crime research drawn from the APWG eCrime archive.
- Bellingcat — No papers accepted into ALEX yet
Open-source investigative methods, technical tutorials and documented case studies.
- FIRST — No papers accepted into ALEX yet
Accepted references explicitly attributed to FIRST as their source collection.
- M3AAWG — 1 paper in ALEX
Messaging security, anti-abuse research, technical guidance and policy research.
- SANS — No papers accepted into ALEX yet
Accepted papers with explicit SANS collection provenance.
- SOUPS — 11 papers in ALEX
Symposium On Usable Privacy and Security; original proceedings and archive links.
- Virus Bulletin — No papers accepted into ALEX yet
Accepted research and technical references explicitly attributed to Virus Bulletin.
Research category collections
- OSINT Methodology — 60 papers
Collecting, validating and connecting public information for investigative work.
- Social Media & SOCMINT — 57 papers
Public platform content, online communities and social-media intelligence methods.
- Dark Web & Underground — 41 papers
Research on underground forums, online markets and concealed services.
- Cyber Threat Intelligence — 690 papers
Threat information collection, interpretation, sharing and analytical context.
- Digital Forensics & Evidence — 103 papers
Digital artefacts, forensic processes and the interpretation of evidence.
- Malware & Exploits — 122 papers
Malicious software, exploitation mechanisms and related technical artefacts.
- Vulnerability Research — 98 papers
Weakness discovery, characterisation and research into software vulnerabilities.
- Disinformation & Influence — 198 papers
Information manipulation, influence activity and the study of online narratives.
- Cybercrime & Fraud — 298 papers
Online offending, deception, victimisation and the organisation of fraud.
- Network & Infrastructure Security — 197 papers
Communications systems, network protection and infrastructure security research.
- IoT & CPS Security — 298 papers
Security of connected devices and systems that interact with physical processes.
- Privacy & Surveillance — 135 papers
Personal information, observation practices and the consequences of data collection.
- AI/ML for Security — 781 papers
Artificial intelligence and machine-learning methods applied to security problems.
- Foundations & Surveys — 175 papers
Background research, reviews and overviews for framing a research question.
Investigation type collections
- Network Investigation — 23 papers
Interpreting communications, traffic observations and network relationships.
- Social Media Analysis — 156 papers
Investigative analysis of platform content, accounts and interactions.
- Dark Web Analysis — 37 papers
Investigative work involving concealed services, underground markets and forums.
- Malware Analysis — 89 papers
Examining malicious-code artefacts and the behaviour they can support.
- Attribution — 43 papers
Assessing relationships, responsibility and the strength of identity-related inferences.
- Phishing Analysis — 177 papers
Research relevant to deceptive messages, websites, URLs and phishing campaigns.
- Forensic Investigation — 134 papers
Investigative use of digital artefacts, preservation and evidence interpretation.
- Threat Hunting — 883 papers
Research for forming and examining hypotheses about possible threat activity.
- Vulnerability Assessment — 740 papers
Evaluating weaknesses, exposure and the evidence supporting an assessment.
- Incident Response — 108 papers
Research for investigating, interpreting and responding to security incidents.
Records classified as Other
Other is a miscellaneous classification rather than a single research subject. Research category: 30 papers; Investigation type: 893 papers. Counts from the two dimensions can overlap.
These records remain in the complete bibliography. Their existing assignments are preserved.