Kaspersky Lab
Modified on: Wed, 7 Sep, 2022 at 7:03 PM
Overview
Kaspersky Transforms allows investigators to check URLs, hashes of
files, and IP addresses against the threat intelligence feeds from
Kaspersky Lab. The Transforms can determine the category of an object as
well as provide additional information (actionable context) that can be
drawn from when implementing certain security policy.
To read more click here.
[KL]
getDNSNameDownloadedHashes
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getDNSNameDownloadedHashes |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getDNSNameDownloadedHashes |
Input Entities |
maltego.DNSName |
Output Entities |
Phrase |
Short Description |
|
[KL] getDNSNameInfo
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getDNSNameInfo |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getDNSNameInfo |
Input Entities |
maltego.DNSName |
Output Entities |
Phrase |
Short Description |
|
[KL] getDNSNameParentDomain
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getDNSNameParentDomain |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getDNSNameParentDomain |
Input Entities |
maltego.DNSName |
Output Entities |
Phrase |
Short Description |
|
[KL] getDNSNameReferrals
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getDNSNameReferrals |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getDNSNameReferrals |
Input Entities |
maltego.DNSName |
Output Entities |
Phrase |
Short Description |
|
[KL] getDNSNameReferredTo
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getDNSNameReferredTo |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getDNSNameReferredTo |
Input Entities |
maltego.DNSName |
Output Entities |
Phrase |
Short Description |
|
[KL] getDNSNameReports
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getDNSNameReports |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getDNSNameReports |
Input Entities |
maltego.DNSName |
Output Entities |
Phrase |
Short Description |
|
[KL] getDNSNameResolutions
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getDNSNameResolutions |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getDNSNameResolutions |
Input Entities |
maltego.DNSName |
Output Entities |
Phrase |
Short Description |
|
[KL] getDNSNameSubdomains
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getDNSNameSubdomains |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getDNSNameSubdomains |
Input Entities |
maltego.DNSName |
Output Entities |
Phrase |
Short Description |
|
[KL] getDNSNameWhois
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getDNSNameWhois |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getDNSNameWhois |
Input Entities |
maltego.DNSName |
Output Entities |
Phrase |
Short Description |
|
[KL] getDomainAccessedHashes
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getDomainAccessedHashes |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getDomainAccessedHashes |
Input Entities |
maltego.Domain |
Output Entities |
Phrase |
Short Description |
|
[KL] getDomainDnsResolutions
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getDomainDnsResolutions |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getDomainDnsResolutions |
Input Entities |
maltego.Domain |
Output Entities |
Phrase |
Short Description |
|
[KL]
getDomainDownloadedHashes
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getDomainDownloadedHashes |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getDomainDownloadedHashes |
Input Entities |
maltego.Domain |
Output Entities |
Phrase |
Short Description |
|
[KL] getDomainInfo
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getDomainInfo |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getDomainInfo |
Input Entities |
maltego.Domain |
Output Entities |
Phrase |
Short Description |
|
[KL] getDomainReferrals
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getDomainReferrals |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getDomainReferrals |
Input Entities |
maltego.Domain |
Output Entities |
Phrase |
Short Description |
|
[KL] getDomainReferredTo
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getDomainReferredTo |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getDomainReferredTo |
Input Entities |
maltego.Domain |
Output Entities |
Phrase |
Short Description |
|
[KL] getDomainReports
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getDomainReports |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getDomainReports |
Input Entities |
maltego.Domain |
Output Entities |
Phrase |
Short Description |
|
[KL] getDomainSubdomains
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getDomainSubdomains |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getDomainSubdomains |
Input Entities |
maltego.Domain |
Output Entities |
Phrase |
Short Description |
|
[KL] getDomainWhois
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getDomainWhois |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getDomainWhois |
Input Entities |
maltego.Domain |
Output Entities |
Phrase |
Short Description |
|
[KL] getHashCertificates
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getHashCertificates |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getHashCertificates |
Input Entities |
maltego.Hash |
Output Entities |
Phrase |
Short Description |
|
[KL] getUrlAccessedHashes
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getUrlAccessedHashes |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getUrlAccessedHashes |
Input Entities |
maltego.URL |
Output Entities |
Phrase |
Short Description |
|
[KL]
getUrlDomainDnsResolutions
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getUrlDomainDnsResolutions |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getUrlDomainDnsResolutions |
Input Entities |
maltego.URL |
Output Entities |
Phrase |
Short Description |
|
[KL] getUrlDomainWhois
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getUrlDomainWhois |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getUrlDomainWhois |
Input Entities |
maltego.URL |
Output Entities |
Phrase |
Short Description |
|
[KL] getUrlDownloadedHashes
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getUrlDownloadedHashes |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getUrlDownloadedHashes |
Input Entities |
maltego.URL |
Output Entities |
Phrase |
Short Description |
|
[KL] getUrlHost
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getUrlHost |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getUrlHost |
Input Entities |
maltego.URL |
Output Entities |
Phrase |
Short Description |
|
[KL] getUrlReferrals
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getUrlReferrals |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getUrlReferrals |
Input Entities |
maltego.URL |
Output Entities |
Phrase |
Short Description |
|
[KL] getUrlReferredTo
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getUrlReferredTo |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getUrlReferredTo |
Input Entities |
maltego.URL |
Output Entities |
Phrase |
Short Description |
|
[KL] getUrlReports
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getUrlReports |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getUrlReports |
Input Entities |
maltego.URL |
Output Entities |
Phrase |
Short Description |
|
[KL] getWebsiteAccessedHashes
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getWebsiteAccessedHashes |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getWebsiteAccessedHashes |
Input Entities |
maltego.Website |
Output Entities |
Phrase |
Short Description |
|
[KL]
getWebsiteDownloadedHashes
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getWebsiteDownloadedHashes |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getWebsiteDownloadedHashes |
Input Entities |
maltego.Website |
Output Entities |
Phrase |
Short Description |
|
[KL] getWebsiteInfo
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getWebsiteInfo |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getWebsiteInfo |
Input Entities |
maltego.Website |
Output Entities |
Phrase |
Short Description |
|
[KL] getWebsiteParentDomain
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getWebsiteParentDomain |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getWebsiteParentDomain |
Input Entities |
maltego.Website |
Output Entities |
Phrase |
Short Description |
|
[KL] getWebsiteReferrals
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getWebsiteReferrals |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getWebsiteReferrals |
Input Entities |
maltego.Website |
Output Entities |
Phrase |
Short Description |
|
[KL] getWebsiteReferredTo
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getWebsiteReferredTo |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getWebsiteReferredTo |
Input Entities |
maltego.Website |
Output Entities |
Phrase |
Short Description |
|
[KL] getWebsiteReports
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getWebsiteReports |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getWebsiteReports |
Input Entities |
maltego.Website |
Output Entities |
Phrase |
Short Description |
|
[KL] getWebsiteResolutions
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getWebsiteResolutions |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getWebsiteResolutions |
Input Entities |
maltego.Website |
Output Entities |
Phrase |
Short Description |
|
[KL] getWebsiteSubdomains
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getWebsiteSubdomains |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getWebsiteSubdomains |
Input Entities |
maltego.Website |
Output Entities |
Phrase |
Short Description |
|
[KL] getWebsiteWhois
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getWebsiteWhois |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getWebsiteWhois |
Input Entities |
maltego.Website |
Output Entities |
Phrase |
Short Description |
|
[KL] getDNSNameAccessedHashes
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getDNSNameAccessedHashes |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getDNSNameAccessedHashes |
Input Entities |
maltego.DNSName |
Output Entities |
Phrase |
Short Description |
|
[KL] getHashAccessedUrls
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getHashAccessedUrls |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getHashAccessedUrls |
Input Entities |
maltego.Hash |
Output Entities |
Phrase |
Short Description |
|
[KL] getHashContainers
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getHashContainers |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getHashContainers |
Input Entities |
maltego.Hash |
Output Entities |
Phrase |
Short Description |
|
[KL] getHashDowloadedFromUrls
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getHashDowloadedFromUrls |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getHashDowloadedFromUrls |
Input Entities |
maltego.Hash |
Output Entities |
Phrase |
Short Description |
|
[KL] getHashDownloadedBy
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getHashDownloadedBy |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getHashDownloadedBy |
Input Entities |
maltego.Hash |
Output Entities |
Phrase |
Short Description |
|
[KL] getHashDownloadedFiles
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getHashDownloadedFiles |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getHashDownloadedFiles |
Input Entities |
maltego.Hash |
Output Entities |
Phrase |
Short Description |
|
[KL] getHashFileNames
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getHashFileNames |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getHashFileNames |
Input Entities |
maltego.Hash |
Output Entities |
Phrase |
Short Description |
|
[KL] getHashFilePaths
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getHashFilePaths |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getHashFilePaths |
Input Entities |
maltego.Hash |
Output Entities |
Phrase |
Short Description |
|
[KL] getHashInfo
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getHashInfo |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getHashInfo |
Input Entities |
maltego.Hash |
Output Entities |
Phrase |
Short Description |
|
[KL] getHashReports
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getHashReports |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getHashReports |
Input Entities |
maltego.Hash |
Output Entities |
Phrase |
Short Description |
|
[KL] getHashStartedBy
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getHashStartedBy |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getHashStartedBy |
Input Entities |
maltego.Hash |
Output Entities |
Phrase |
Short Description |
|
[KL] getHashStartedFiles
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getHashStartedFiles |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getHashStartedFiles |
Input Entities |
maltego.Hash |
Output Entities |
Phrase |
Short Description |
|
[KL] getIPCountry
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getIPCountry |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getIPCountry |
Input Entities |
maltego.IPv4Address |
Output Entities |
Phrase |
Short Description |
|
[KL] getIPDnsResolutions
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getIPDnsResolutions |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getIPDnsResolutions |
Input Entities |
maltego.IPv4Address |
Output Entities |
Phrase |
Short Description |
|
[KL] getIPDownloadedHashes
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getIPDownloadedHashes |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getIPDownloadedHashes |
Input Entities |
maltego.IPv4Address |
Output Entities |
Phrase |
Short Description |
|
[KL] getIPHostedUrls
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getIPHostedUrls |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getIPHostedUrls |
Input Entities |
maltego.IPv4Address |
Output Entities |
Phrase |
Short Description |
|
[KL] getIPInfo
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getIPInfo |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getIPInfo |
Input Entities |
maltego.IPv4Address |
Output Entities |
Phrase |
Short Description |
|
[KL] getIPReports
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getIPReports |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getIPReports |
Input Entities |
maltego.IPv4Address |
Output Entities |
Phrase |
Short Description |
|
[KL] getIPWhois
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getIPWhois |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getIPWhois |
Input Entities |
maltego.IPv4Address |
Output Entities |
Phrase |
Short Description |
|
[KL] getUrlInfo
Token |
string |
DefaultValue |
true |
true |
false |
Display Name |
[KL] getUrlInfo |
Owner |
MRTI KasperskyLab |
Author |
MRTI@kaspersky.com |
Data Source |
KL |
Transform Name |
getUrlInfo |
Input Entities |
maltego.URL |
Output Entities |
Phrase |
Short Description |
|