Hey guys,

I'm getting pretty good at clearnet/surface web OSINT, but whenever I am trying to find anything on Tor I fall flat on my face. Even things that I know are on there. I'm going to assume the many Tor search engines don't index anything automatically, and instead rely on people adding sites to their search engine?

Essentially, I'm researching an event that involves ransomware and possible leaked files and trying to see if I can find any posts or mentions about this event. It is 100% possible that there are no mentions or leaks from this event. However, this brought the question to my mind about OSINT techniques for the dark web. I've seen a few python tools that claim to be able to do this, I'm always super hesitant about downloading new tools and repos (I don't run a VM very often, and am not confident enough in python to be able to identify if something I'm downloading is harmful).

Just wondering if you guys have any go-to techniques, tools, etc. for when you are dealing with OSINT in onions. Thanks guys!