>>143165
>>143195
the US agencies workflow for illegal forums is usually like this:
1. receive legal complaint on illegal forum
2. investigate forum owners and do OPSEC research on them
3. arrest forum owners, receive access to servers
4. if forum users has bad agents, do not announce the arrest yet and run the forum undercover for a period of 30 days or something while users still think everything is normal
5. if users have accounts do OPSEC research on their mail addresses, put malicious images and JS so that computers send their real IP, OS version and MAC to the pozzed server
6. make a case for court against selected users when proof is enough and receive search warrant
7. enter the house and investigate computer: is it running linux (hint he's a knowledgeable geek)? if it's on, search the cache, directly read the RAM, search for logs to have even more proof to arrest the users
8. bring the selected users to federal court (crimes must be felonies for an agency to be involved iirc)
9. announce the closure of the forum on its main page citing the laws that weren't followed
that's the main course i've seen on court reports. as you can see tor usually has no part in it, because it doesn't provide security but only pseudo-anonimity. but it has CVEs like any other program too.