Reviews ethnographic, machine-learning and graph-analytic techniques for studying ransomware-as-a-service marketplaces on Tor. Proposes a mixed-methods protocol that respects ethics while capturing 7.3 M forum posts across 12 languages.
