Viewlets in Maltego allow investigators to uncover non-obvious insights by dynamically altering the size and color of Entities based on the number of incoming, outgoing, or total links.
Number of Incoming Links
This viewlet focuses on Entities that receive the most connections, making it ideal for identifying targets or key focus points in a network.
Number of Outgoing Links
This viewlet identifies Entities initiating the most connections, making it effective for analyzing propagation and dissemination patterns.
Number of All Links
This viewlet highlights Entities with the highest number of links overall by considering both incoming and outgoing links.
Viewlet Comparison Table
| Viewlet | Best For | Insights for Investigators |
|---|---|---|
| All Links | Large graphs; hubs of activity | Identify central players (e.g., distribution hubs, highly connected nodes). |
| Incoming Links | Medium to large graphs; targets | Pinpoint targets of activity (e.g., accounts or servers being referenced or attacked). |
| Outgoing Links | Small to medium graphs; propagators | Detect entities spreading content or initiating connections (e.g., bots, malware distributors). |