{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,20]],"date-time":"2026-07-20T14:15:56Z","timestamp":1784556956994,"version":"3.55.0"},"reference-count":59,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,4,30]],"date-time":"2026-04-30T00:00:00Z","timestamp":1777507200000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/100014809","name":"Technology Agency of the Czech Republic","doi-asserted-by":"publisher","award":["FW11020057"],"award-info":[{"award-number":["FW11020057"]}],"id":[{"id":"10.13039\/100014809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Computers & Security"],"published-print":{"date-parts":[[2026,9]]},"DOI":"10.1016\/j.cose.2026.104938","type":"journal-article","created":{"date-parts":[[2026,4,30]],"date-time":"2026-04-30T15:09:14Z","timestamp":1777561754000},"page":"104938","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":2,"special_numbering":"C","title":["Comparative analysis of OSINT tools, techniques, and legal aspects"],"prefix":"10.1016","volume":"168","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-6820-8391","authenticated-orcid":false,"given":"Willi","family":"Lazarov","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-9492-4703","authenticated-orcid":false,"given":"Vojtech","family":"Moravec","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4965-1467","authenticated-orcid":false,"given":"Pavel","family":"Loutocky","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1669-9931","authenticated-orcid":false,"given":"Jakub","family":"Vostoupal","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6504-5619","authenticated-orcid":false,"given":"Zdenek","family":"Martinasek","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.cose.2026.104938_b1","series-title":"Open Source Intelligence Investigation: from Strategy to Implementation","author":"Akhgar","year":"2016"},{"issue":"10","key":"10.1016\/j.cose.2026.104938_b2","article-title":"How dark web monitoring can be used for osint and investigations","volume":"101","author":"Alquwayzani","year":"2023","journal-title":"J. Theor. Appl. Inf. Technol."},{"issue":"1","key":"10.1016\/j.cose.2026.104938_b3","article-title":"Threats from the dark: A review over dark web investigation research for cyber threat intelligence","volume":"2021","author":"Basheer","year":"2021","journal-title":"J. Comput. Networks Commun."},{"key":"10.1016\/j.cose.2026.104938_b4","doi-asserted-by":"crossref","unstructured":"Belghith, Y., Venkatagiri, S., Luther, K., 2022. Compete, collaborate, investigate: exploring the social structures of open source intelligence investigations. In: Proceedings of the 2022 CHI Conference on Human Factors in Computing Systems. pp. 1\u201318.","DOI":"10.1145\/3491102.3517526"},{"key":"10.1016\/j.cose.2026.104938_b5","doi-asserted-by":"crossref","unstructured":"Bennett, C., Abdou, A., van Oorschot, P.C., 2021. Empirical scanning analysis of Censys and Shodan. In: Workshop on Measurements, Attacks, and Defenses for the Web.","DOI":"10.14722\/madweb.2021.23009"},{"issue":"2","key":"10.1016\/j.cose.2026.104938_b6","doi-asserted-by":"crossref","first-page":"317","DOI":"10.1365\/s43439-021-00042-7","article-title":"Open source intelligence: Introduction, legal, and ethical considerations","volume":"2","author":"B\u00f6hm","year":"2021","journal-title":"Int. Cybersecur. Law Rev."},{"issue":"4","key":"10.1016\/j.cose.2026.104938_b7","doi-asserted-by":"crossref","first-page":"2911","DOI":"10.1007\/s10207-024-00868-2","article-title":"A systematic review on research utilising artificial intelligence for open source intelligence (OSINT) applications","volume":"23","author":"Browne","year":"2024","journal-title":"Int. J. Inf. Secur."},{"issue":"5","key":"10.1016\/j.cose.2026.104938_b8","article-title":"Open source intelligence extraction for terrorism-related information: A review","volume":"12","author":"Chaudhary","year":"2022","journal-title":"Wiley Interdiscip. Rev.: Data Min. Knowl. Discov."},{"key":"10.1016\/j.cose.2026.104938_b9","series-title":"Judgment of the court (sixth chamber) of 6 November 2003 \u2014 Case C-101\/01, criminal proceedings against bodil lindqvist","author":"CJEU","year":"2003"},{"key":"10.1016\/j.cose.2026.104938_b10","series-title":"Web of science","author":"Clarivate","year":"2025"},{"key":"10.1016\/j.cose.2026.104938_b11","series-title":"The convention on cybercrime (budapest convention, ETS no. 185) and its protocols","author":"Council of Europe","year":"2025"},{"key":"10.1016\/j.cose.2026.104938_b12","series-title":"Dark web statistics: A hidden world of crime and fear","author":"Dekker","year":"2025"},{"key":"10.1016\/j.cose.2026.104938_b13","series-title":"Amount of data created daily (2025)","author":"Duarte","year":"2025"},{"key":"10.1016\/j.cose.2026.104938_b14","series-title":"Open-source intelligence (OSINT) & its legal and ethical aspects","author":"EITHOS","year":"2024"},{"key":"10.1016\/j.cose.2026.104938_b15","series-title":"Scopus","author":"Elsevier","year":"2025"},{"key":"10.1016\/j.cose.2026.104938_b16","series-title":"Guidelines 10\/2020 on restrictions under article 23 GDPR","author":"European Data Protection Board","year":"2020"},{"key":"10.1016\/j.cose.2026.104938_b17","volume":"vol. C 364\/1","author":"European Parliament","year":"2000"},{"key":"10.1016\/j.cose.2026.104938_b18","first-page":"20","article-title":"Directive 96\/9\/EC of the European parliament and of the council of 11 March 1996 on the legal protection of databases","volume":"L 77","author":"European Union","year":"1996","journal-title":"Off. J. Eur. Union"},{"key":"10.1016\/j.cose.2026.104938_b19","first-page":"10","article-title":"Directive 2001\/29\/EC of the European parliament and of the council of 22 May 2001 on the harmonisation of certain aspects of copyright and related rights in the information society","volume":"L 167","author":"European Union","year":"2001","journal-title":"Off. J. Eur. Union"},{"key":"10.1016\/j.cose.2026.104938_b20","first-page":"89","volume":"L 119\/89","author":"European Union","year":"2016","journal-title":"Off. J. Eur. Union"},{"key":"10.1016\/j.cose.2026.104938_b21","first-page":"1","volume":"L 119\/1","author":"European Union","year":"2016","journal-title":"Off. J. Eur. Union"},{"key":"10.1016\/j.cose.2026.104938_b22","first-page":"92","article-title":"Directive (EU) 2019\/790 of the European parliament and of the council of 17 April 2019 on copyright and related rights in the digital single market and amending directives 96\/9\/EC and 2001\/29\/EC","volume":"L 130","author":"European Union","year":"2019","journal-title":"Off. J. Eur. Union"},{"key":"10.1016\/j.cose.2026.104938_b23","first-page":"118","volume":"L 191","author":"European Union","year":"2023","journal-title":"Off. J. Eur. Union"},{"issue":"3","key":"10.1016\/j.cose.2026.104938_b24","doi-asserted-by":"crossref","first-page":"345","DOI":"10.1080\/19361610.2020.1761737","article-title":"Systematic literature review to investigate the application of open source intelligence (OSINT) with artificial intelligence","volume":"16","author":"Evangelista","year":"2021","journal-title":"J. Appl. Secur. Res."},{"key":"10.1016\/j.cose.2026.104938_b25","series-title":"The smartphone as weapon part 2: the targeting cycle in Ukraine","author":"Ford","year":"2022"},{"key":"10.1016\/j.cose.2026.104938_b26","series-title":"Weaving the Dark web: Legitimacy on Freenet, Tor, and I2P","author":"Gehl","year":"2018"},{"issue":"4","key":"10.1016\/j.cose.2026.104938_b27","doi-asserted-by":"crossref","first-page":"1827","DOI":"10.1007\/s00146-023-01628-x","article-title":"Open source intelligence and AI: a systematic review of the GELSI literature","volume":"39","author":"Ghioni","year":"2024","journal-title":"AI Soc."},{"key":"10.1016\/j.cose.2026.104938_b28","series-title":"Search GitHub","author":"GitHub","year":"2025"},{"issue":"12","key":"10.1016\/j.cose.2026.104938_b29","doi-asserted-by":"crossref","first-page":"5428","DOI":"10.1109\/TII.2018.2857213","article-title":"A reliability comparison method for OSINT validity analysis","volume":"14","author":"Gong","year":"2018","journal-title":"IEEE Trans. Ind. Informatics"},{"key":"10.1016\/j.cose.2026.104938_b30","series-title":"Google","author":"Google","year":"2025"},{"key":"10.1016\/j.cose.2026.104938_b31","series-title":"Google scholar","author":"Google LLC","year":"2025"},{"key":"10.1016\/j.cose.2026.104938_b32","series-title":"Open Source Intelligence Methods and Tools","author":"Hassan","year":"2018"},{"key":"10.1016\/j.cose.2026.104938_b33","series-title":"Exactis leak exposes database with 340 million records","author":"Heller","year":"2025"},{"issue":"1","key":"10.1016\/j.cose.2026.104938_b34","doi-asserted-by":"crossref","DOI":"10.1155\/2022\/1290129","article-title":"Current status and security trend of osint","volume":"2022","author":"Hwang","year":"2022","journal-title":"Wirel. Commun. Mob. Comput."},{"key":"10.1016\/j.cose.2026.104938_b35","series-title":"WayBackMachine","author":"Internet Archive","year":"2025"},{"issue":"5","key":"10.1016\/j.cose.2026.104938_b36","article-title":"Study on application of open source intelligence from social media in the military","volume":"1507","author":"Ju","year":"2020","journal-title":"J. Phys.: Conf. Ser."},{"key":"10.1016\/j.cose.2026.104938_b37","series-title":"Large Language Models: A Deep Dive: Bridging Theory and Practice","first-page":"219","article-title":"LLM challenges and solutions","author":"Kamath","year":"2024"},{"key":"10.1016\/j.cose.2026.104938_b38","series-title":"Critical Infrastructure Security and Resilience: Theories, Methods, Tools and Technologies","first-page":"261","article-title":"Open source intelligence for energy sector cyberattacks","author":"Keliris","year":"2019"},{"issue":"2","key":"10.1016\/j.cose.2026.104938_b39","doi-asserted-by":"crossref","first-page":"107","DOI":"10.1007\/s42488-022-00068-4","article-title":"A system for organizing, collecting, and presenting open-source intelligence","volume":"4","author":"Khan","year":"2022","journal-title":"J. Data, Inf. Manag."},{"key":"10.1016\/j.cose.2026.104938_b40","series-title":"Automating Open Source Intelligence: Algorithms for OSINT","author":"Layton","year":"2016"},{"key":"10.1016\/j.cose.2026.104938_b41","article-title":"Open source intelligence tools, services, and data sources","author":"Lazarov","year":"2025","journal-title":"Comput. Secur."},{"key":"10.1016\/j.cose.2026.104938_b42","series-title":"OSINT hub","author":"Lazarov","year":"2025"},{"key":"10.1016\/j.cose.2026.104938_b43","series-title":"Human stories & ideas","author":"Medium","year":"2025"},{"issue":"4","key":"10.1016\/j.cose.2026.104938_b44","doi-asserted-by":"crossref","first-page":"702","DOI":"10.1080\/08850607.2018.1492826","article-title":"Open source intelligence (OSINT): An oxymoron?","volume":"31","author":"Miller","year":"2018","journal-title":"Int. J. Intell. CounterIntelligence"},{"key":"10.1016\/j.cose.2026.104938_b45","series-title":"Nixintel\u2019s OSINT resource list","author":"Nixintel","year":"2025"},{"key":"10.1016\/j.cose.2026.104938_b46","series-title":"GDPR \/ General Data Protection Regulation (EU) 2016\/679 \u2013 practical commentary","first-page":"580","author":"Nul\u00ed\u010dek","year":"2018"},{"key":"10.1016\/j.cose.2026.104938_b47","series-title":"How is OSINT affected by gdpr?","author":"OSINT Central","year":"2023"},{"key":"10.1016\/j.cose.2026.104938_b48","doi-asserted-by":"crossref","first-page":"10282","DOI":"10.1109\/ACCESS.2020.2965257","article-title":"The not yet exploited goldmine of OSINT: Opportunities, open challenges and future trends","volume":"8","author":"Pastor-Galindo","year":"2020","journal-title":"IEEE Access"},{"issue":"2 (30)","key":"10.1016\/j.cose.2026.104938_b49","first-page":"5","article-title":"Open source intelligence: An overview of today\u2019s operational challenges and human rights affected as a consequence","author":"Perez","year":"2023","journal-title":"Rom. Intell. Stud. Rev."},{"issue":"1","key":"10.1016\/j.cose.2026.104938_b50","doi-asserted-by":"crossref","first-page":"55","DOI":"10.1177\/0032258X16671031","article-title":"Intelligent evidence: Using open source intelligence (OSINT) in criminal proceedings","volume":"90","author":"Sampson","year":"2017","journal-title":"Police J."},{"key":"10.1016\/j.cose.2026.104938_b51","series-title":"Seznam","author":"Seznam.cz","year":"2025"},{"key":"10.1016\/j.cose.2026.104938_b52","doi-asserted-by":"crossref","first-page":"83","DOI":"10.1016\/j.procs.2022.11.041","article-title":"Open source intelligence tools","volume":"213","author":"Stodelov","year":"2022","journal-title":"Procedia Comput. Sci."},{"key":"10.1016\/j.cose.2026.104938_b53","series-title":"International directory of search engines","author":"Strome","year":"2025"},{"issue":"4\u20135","key":"10.1016\/j.cose.2026.104938_b54","doi-asserted-by":"crossref","first-page":"530","DOI":"10.1177\/1367549415577396","article-title":"Open source intelligence, social media and law enforcement: Visions, constraints and critiques","volume":"18","author":"Trottier","year":"2015","journal-title":"Eur. J. Cult. Stud."},{"issue":"1","key":"10.1016\/j.cose.2026.104938_b55","first-page":"177","article-title":"Open-source intelligence (OSINT). The way ahead","volume":"12","author":"Ungureanu","year":"2021","journal-title":"J. D\u00e9f. Resour. Manag. (JoDRM)"},{"key":"10.1016\/j.cose.2026.104938_b56","series-title":"Automating Open Source Intelligence","first-page":"159","article-title":"The limitations of automating OSINT: understanding the question, not the answer","author":"Weir","year":"2016"},{"issue":"11","key":"10.1016\/j.cose.2026.104938_b57","doi-asserted-by":"crossref","first-page":"12407","DOI":"10.1007\/s10462-023-10454-y","article-title":"Open-source intelligence: a comprehensive review of the current state, applications and future perspectives in cyber security","volume":"56","author":"Yadav","year":"2023","journal-title":"Artif. Intell. Rev."},{"issue":"12","key":"10.1016\/j.cose.2026.104938_b58","doi-asserted-by":"crossref","DOI":"10.3390\/math10122054","article-title":"Mapping tools for open source intelligence with cyber kill chain for adversarial aware security","volume":"10","author":"Yamin","year":"2022","journal-title":"Mathematics"},{"issue":"2","key":"10.1016\/j.cose.2026.104938_b59","doi-asserted-by":"crossref","first-page":"65","DOI":"10.5604\/01.3001.0012.1474","article-title":"Open source intelligence (OSINT) as an element of military RECON","volume":"19","author":"Zi\u00f3\u0142kowska","year":"2018","journal-title":"Secur. Def. Q."}],"container-title":["Computers & Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0167404826001148?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0167404826001148?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,7,3]],"date-time":"2026-07-03T22:04:00Z","timestamp":1783116240000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S0167404826001148"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,9]]},"references-count":59,"alternative-id":["S0167404826001148"],"URL":"https:\/\/doi.org\/10.1016\/j.cose.2026.104938","relation":{},"ISSN":["0167-4048"],"issn-type":[{"value":"0167-4048","type":"print"}],"subject":[],"published":{"date-parts":[[2026,9]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Comparative analysis of OSINT tools, techniques, and legal aspects","name":"articletitle","label":"Article Title"},{"value":"Computers & Security","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.cose.2026.104938","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 The Authors. Published by Elsevier Ltd.","name":"copyright","label":"Copyright"}],"article-number":"104938"}}