Overview
Intel 471 provides in-depth and globally relevant coverage and tracking of sophisticated, financially motivated cybercriminals, hacktivists and other threats targeting organizations, their customers, employees, and suppliers. The Intel 471 Transforms in Maltego supports cyber security teams, law enforcement agencies, Trust & Safety investigators, and researchers in querying and mapping deep and dark web data and threat intelligence in a visualized graph.
Intel 471 is active in places where entry is highly guarded such as underground marketplaces and chat rooms.
With the Intel 471 data integration in Maltego, investigators can gain insights in various cybersecurity disciplines such as deep and dark web investigations, brand protection, due diligence, fraud, insider threat, vulnerability management, and more.
The Intel 471 data Subscriptions for Maltego cover Intel 471 Deep & Dark Web Collections, which is a collection of deep and dark web data acquired from underground forums, marketplaces, and chat rooms such as Telegram, Discord, IRC, ICQ, and others.
With Intel 471 data subscriptions, investigators can obtain near real-time visibility into key actors, assets, issues, organizations, and other criminal entities, as well as evidence from within the cyber underground—all via a flexible, annual subscription that is tailored to individual project needs and budgets.
Each data subscription allows a fixed number of Transform runs per month.
Be sure to visit our blog for further insights. For a brief introduction to the updated Intel 471 Maltego Transforms and the Intel 471 data subscriptions read Enrich Threat Intelligence and Criminal Investigations with Intel 471 Transforms and Data Subscriptions.
For an interesting overview of how the Intel471 Transforms for Maltego enables investigators and organizations to proactively measure security threats and link risk data, read about the Intel 471 Solution in Maltego.
You can read more about the Intel 471 Transforms for Maltego on our website here.
Updates and Changelog
Intel471 Enterprise Transforms Update: 06 July 2022.
We have introduced new Transforms and extraction capabilities to cater to Breach Alerts, Malware Reports, and Credentials Intelligence.
Through the provision of new Transform properties, we have provided users with the capability to show dates on Entity link lines instead of within the caption of the Entity itself. Additionally, we have added the capability to turn off the Intel 471 No Entity icon to help reduce noise in large graphs.
We have also provided the ability to turn off the RAGB (Red, Amber, Green, and Blue) bookmarking to support alternative bookmark use cases and have introduced a second layer of filtering for returned results that uses regex to allow for more advanced use cases.
Updates
Minor updates have been made to naming conventions for some Transforms and de-duplication of properties for some Entities.
- GIR to Malware Report
- GIR to Credentialset
- GIR to Breachalert
- Malware Family to Malware Report
- Malware Report to Alias
- Malware Report to GIR
- Malware Report to Malware Family
- Credentialset to Date
- Credentialset to GIR
- Credentialset to Titanurl
- Credentialset to Victim
- Domain to Credentialset
- Phrase to Credentialset
- Phrase to Malware Report
- Phrase to Breachalert
- Website to Breachalert
- "MessageToTopic" re-named to "MessageToThread"
Additionally all Transforms and respective URLs have been re-named so that they match the pattern used by the library's registry.
This means that the "dot" (.) has been replaced with the "dash" (-) within the name, and the prefix was added to each URL, for example:
Changed Output Entity Types
Output Entity changed from intel471.URL into maltego.URL for the following Transforms:
- URL to Post
- URL to Report
- URL to Malware Event
- -entity_date - Toggle showing the date inside Entity's caption
- -link_date - Toggle showing the date on Entity's link line
- -no_results_entity - Toggle showing an Entity representing empty results
- -rag_bookmarks - Toggle showing RAG Bookmarks based on Entity's age
- -result_filter - Additionally filter results returned by the API
[Intel 471] Actor to Report
Description
Tries to identify Reports for a specific Actor/Forum combination.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Actor to Report |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-actortoreport |
Input Entities | intel471.actor |
Output Entities | Phrase |
Short Description | Tries to identify Reports for a specific Actor/Forum combination. |
[Intel 471] Alias to Report
Description
Takes an Alias and converts it to a Report type.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Alias to Report |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-aliastoreport |
Input Entities | maltego.Alias |
Output Entities | Phrase |
Short Description | Takes an Alias and converts it to a Report type. |
[Intel 471] Thread to Titan URL
Description
Extracts the Titan URL from the Forum Thread.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Thread to Titan URL |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-threadtotitanurl |
Input Entities | intel471.thread |
Output Entities | Phrase |
Short Description | Extracts the Titan URL from the Forum Thread. |
[Intel 471] Credential Set to Date
Description
Translates Credential Set to a date.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Credential Set to Date |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | crd-credentialsettodate |
Input Entities | intel471.credentialset |
Output Entities | Phrase |
Short Description | Translates Credential Set to a date. |
[Intel 471] Event to GIR
Description
Malware Event to GIR.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Event to GIR |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | mal-eventtogir |
Input Entities | intel471.malwareevent |
Output Entities | Phrase |
Short Description | Malware Event to GIR. |
[Intel 471] Credential Set to GIR
Description
Takes a Credential Set and extracts GIR info
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Credential Set to GIR |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | crd-credentialsettogir |
Input Entities | intel471.credentialset |
Output Entities | Phrase |
Short Description | Takes a Credential Set and extracts GIR info |
[Intel 471] Credential Set to Titan URL
Description
Extracts the Titan URL from the Credential Set.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Credential Set to Titan URL |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | crd-credentialsettotitanurl |
Input Entities | intel471.credentialset |
Output Entities | Phrase |
Short Description | Extracts the Titan URL from the Credential Set. |
[Intel 471] Credential Set to Victim
Description
Takes a Credential Set and extracts victims’ org names and URLs.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Credential Set to Victim |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | crd-credentialsettovictim |
Input Entities | intel471.credentialset |
Output Entities | Phrase |
Short Description | Takes a Credential Set and extracts victims’ org names and URLs. |
[Intel 471] Phrase to Credential Set
Description
Takes a Phrase and searches across Credential Sets.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Phrase to Credential Set |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | crd-phrasetocredentialset |
Input Entities | maltego.Phrase |
Output Entities | Phrase |
Short Description | Takes a Phrase and searches across Credential Sets. |
[Intel 471] Domain to Credential Set
Description
Takes a Domain and searches across Credential Sets.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Domain to Credential Set |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | crd-domaintocredentialset |
Input Entities | maltego.Domain |
Output Entities | Phrase |
Short Description | Takes a Domain and searches across Credential Sets. |
[Intel 471] GIR Path to Credential Set
Description
Takes GIR Path and searches across Credential Sets.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] GIR Path to Credential Set |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | crd-girpathtocredentialset |
Input Entities | intel471.girpath |
Output Entities | Phrase |
Short Description | Takes GIR Path and searches across Credential Sets. |
[Intel 471] Domain to Report
Description
Takes a Domain and searches across Reports.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Domain to Report |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | gen-domaintoreport |
Input Entities | maltego.Domain |
Output Entities | Phrase |
Short Description | Takes a Domain and searches across Reports. |
[Intel 471] Email to Report
Description
Takes an Email Address and searches across Reports.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Email to Report |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | gen-emailtoreport |
Input Entities | maltego.EmailAddress |
Output Entities | Phrase |
Short Description | Takes an Email Address and searches across Reports. |
[Intel 471] File to Report
Description
Takes a File and searches across Reports.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] File to Report |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | gen-filetoreport |
Input Entities | maltego.File |
Output Entities | Phrase |
Short Description | Takes a File and searches across Reports. |
[Intel 471] IP Address to Report
Description
Takes an IP Address and searches across Reports.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] IP Address to Report |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | gen-ipaddresstoreport |
Input Entities | maltego.IPv4Address |
Output Entities | Phrase |
Short Description | Takes an IP Address and searches across Reports. |
[Intel 471] IP to IOC
Description
Takes an IP Address and searches across IOCs.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] IP to IOC |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | gen-iptoioc |
Input Entities | maltego.IPv4Address |
Output Entities | Phrase |
Short Description | Takes an IP Address and searches across IOCs. |
[Intel 471] Phrase to IOC
Description
Takes a Phrase and searches across IOCs.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Phrase to IOC |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | gen-phrasetoioc |
Input Entities | maltego.Phrase |
Output Entities | Phrase |
Short Description | Takes a Phrase and searches across IOCs. |
[Intel 471] Phrase to Report
Description
Takes a Phrase and searches across Reports.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Phrase to Report |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | gen-phrasetoreport |
Input Entities | maltego.Phrase |
Output Entities | Phrase |
Short Description | Takes a Phrase and searches across Reports. |
[Intel 471] URL to Report
Description
Takes a URL and searches across Reports.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] URL to Report |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | gen-urltoreport |
Input Entities | maltego.URL |
Output Entities | Phrase |
Short Description | Takes a URL and searches across Reports. |
[Intel 471] Website to IOC
Description
Takes a Website and searches for IOCs.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Website to IOC |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | gen-websitetoioc |
Input Entities | maltego.Website |
Output Entities | Phrase |
Short Description | Takes a Website and searches for IOCs. |
Description
Takes a Website and searches across Reports.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Website to Information Report |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | gen-websitetoreport |
Input Entities | maltego.Website |
Output Entities | Phrase |
Short Description | Takes a Website and searches across Reports. |
[Intel 471] Botnet Name to Alias
Description
Converts a Botnet name to an Alias.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Botnet Name to Alias |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | mal-botnetnametoalias |
Input Entities | intel471.malwareeventsettings |
Output Entities | Phrase |
Short Description | Converts a Botnet name to an Alias. |
[Intel 471] Botnet Setting to Key
Description
Extracts Keys from Botnet settings.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Botnet Setting to Key |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | mal-botnetsettingtokey |
Input Entities | intel471.malwareeventsettings |
Output Entities | Phrase |
Short Description | Extracts Keys from Botnet settings. |
[Intel 471] Domain to Malware Event
Description
Takes a Domain and searches across Malware Events.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Domain to Malware Event |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | mal-domaintomalwareevent |
Input Entities | maltego.Domain |
Output Entities | Phrase |
Short Description | Takes a Domain and searches across Malware Events. |
[Intel 471] Event to Controller
Description
Event to Controller: Obtains Controller details.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Event to Controller |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | mal-eventtocontroller |
Input Entities | intel471.malwareevent |
Output Entities | Phrase |
Short Description | Event to Controller: Obtains Controller details. |
[Intel 471] Event to Event Type
Description
Event to Event Type: Based on our extraction.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Event to Event Type |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | mal-eventtoeventtype |
Input Entities | intel471.malwareevent |
Output Entities | Phrase |
Short Description | Event to Event Type: Based on our extraction. |
[Intel 471] Event to File
Description
Extracts MD5, SHA1 and SHA256 hashes from Events.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Event to File |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | mal-eventtohash |
Input Entities | intel471.malwareevent |
Output Entities | Phrase |
Short Description | Extracts MD5, SHA1 and SHA256 hashes from Events. |
[Intel 471] Event to Malware Family
Description
Converts an Event to a Malware Family.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Event to Malware Family |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | mal-eventtomalwarefamily |
Input Entities | intel471.malwareevent |
Output Entities | Phrase |
Short Description | Converts an Event to a Malware Family. |
[Intel 471] Event to Mitre
Description
Event to Mitre Attack Framework where available.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Event to Mitre |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | mal-eventtomitre |
Input Entities | intel471.malwareevent |
Output Entities | Phrase |
Short Description | Event to Mitre Attack Framework where available. |
[Intel 471] Event to Receiver
Description
Converts an Event to Spam Receivers.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Event to Receiver |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | mal-eventtoreceiver |
Input Entities | intel471.malwareevent |
Output Entities | Phrase |
Short Description | Converts an Event to Spam Receivers. |
[Intel 471] Event to Sender
Description
Converts an Event to Spam Sender.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Event to Sender |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | mal-eventtosender |
Input Entities | intel471.malwareevent |
Output Entities | Phrase |
Short Description | Converts an Event to Spam Sender. |
[Intel 471] Event to Settings
Description
Event to Settings configuration.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Event to Settings |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | mal-eventtosettings |
Input Entities | intel471.malwareevent |
Output Entities | Phrase |
Short Description | Event to Settings configuration. |
[Intel 471] Event Type to Event
Description
Converts an Event Type to an Event.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Event Type to Event |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | mal-eventtypetoevent |
Input Entities | intel471.malwareeventtype |
Output Entities | Phrase |
Short Description | Converts an Event Type to an Event. |
[Intel 471] File to Malware Event
Description
Takes a File and searches across Malware Events.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] File to Malware Event |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | mal-filetomalwareevent |
Input Entities | maltego.File |
Output Entities | Phrase |
Short Description | Takes a File and searches across Malware Events. |
[Intel 471] GIR to Malware Event
Description
GIR to Malware Events : Obtains Events based on GIR Path number.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] GIR to Malware Event |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | mal-girtomalwareevent |
Input Entities | intel471.girpath |
Output Entities | Phrase |
Short Description | GIR to Malware Events : Obtains Events based on GIR Path number. |
[Intel 471] Phrase to Malware Report
Description
Takes a Phrase and searches across Malware Reports.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Phrase to Malware Report |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | mal-phrasetomalwarereport |
Input Entities | maltego.Phrase |
Output Entities | Phrase |
Short Description | Takes a Phrase and searches across Malware Reports. |
[Intel 471] GIR to Malware Report
Description
Takes a GIR path and searches related Malware Reports.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] GIR to Malware Report |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | mal-girtomalwarereport |
Input Entities | intel471.girpath |
Output Entities | Phrase |
Short Description | Takes a GIR path and searches related Malware Reports. |
[Intel 471] IP to Malware Event
Description
Takes an IP Address and searches across Malware Events.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] IP to Malware Event |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | mal-iptomalwareevent |
Input Entities | maltego.IPv4Address |
Output Entities | Phrase |
Short Description | Takes an IP Address and searches across Malware Events. |
[Intel 471] Malware Family to Event
Description
Converts a Malware Family to an Event.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Malware Family to Event |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | mal-malwarefamilytoevent |
Input Entities | intel471.malwarefamily |
Output Entities | Phrase |
Short Description | Converts a Malware Family to an Event. |
[Intel 471] Malware Family to Malware Report
Description
Takes a Malware Family and searches across Malware Reports.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Malware Family to Malware Report |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | mal-malwarefamilytomalwarereport |
Input Entities | intel471.malwarefamily |
Output Entities | Phrase |
Short Description | Takes a Malware Family and searches across Malware Reports. |
[Intel 471] Malware Report to Alias
Description
Takes a Malware Report and extracts adversaries.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Malware Report to Alias |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | mal-malwarereporttoalias |
Input Entities | intel471.malwarereport |
Output Entities | Phrase |
Short Description | Takes a Malware Report and extracts adversaries. |
[Intel 471] Malware Report to GIR Path
Description
Takes a Malware Report and extracts the GIR Paths.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Malware Report to GIR Path |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | mal-malwarereporttogir |
Input Entities | intel471.malwarereport |
Output Entities | Phrase |
Short Description | Takes a Malware Report and extracts the GIR Paths. |
[Intel 471] Malware Report to Malware Family
Description
Converts a Malware Report to a Malware Family.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Malware Report to Malware Family |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | mal-malwarereporttomalwarefamily |
Input Entities | intel471.malwarereport |
Output Entities | Phrase |
Short Description | Converts a Malware Report to a Malware Family. |
[Intel 471] Phrase to Malware Event
Description
Takes a Phrase and searches across Malware Events.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Phrase to Malware Event |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | mal-phrasetomalwareevent |
Input Entities | maltego.Phrase |
Output Entities | Phrase |
Short Description | Takes a Phrase and searches across Malware Events. |
[Intel 471] URL to Malware Event
Description
Takes a URL and searches across Malware Events.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] URL to Malware Event |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | mal-urltomalwareevent |
Input Entities | maltego.URL |
Output Entities | Phrase |
Short Description | Takes a URL and searches across Malware Events. |
[Intel 471] Breach Alert to Alias
Description
Takes a Breach Alert and converts it to an Alias entity.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Breach Alert to Alias |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | rep-breachalerttoalias |
Input Entities | intel471.breachalert |
Output Entities | Phrase |
Short Description | Takes a Breach Alert and converts it to an Alias entity. |
[Intel 471] Breach Alert to Victim
Description
Takes a Breach Alert and extracts victims’ org names and URLs.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Breach Alert to Victim |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | rep-breachalerttovictim |
Input Entities | intel471.breachalert |
Output Entities | Phrase |
Short Description | Takes a Breach Alert and extracts victims’ org names and URLs. |
[Intel 471] Phrase to Breach Alert
Description
Takes a Phrase and searches across Breach Alerts.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Phrase to Breach Alert |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | rep-phrasetobreachalert |
Input Entities | maltego.Phrase |
Output Entities | Phrase |
Short Description | Takes a Phrase and searches across Breach Alerts. |
[Intel 471] Domain to Breach Alert
Description
Takes a Domain and searches across Breach Alerts.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Domain to Breach Alert |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | rep-domaintobreachalert |
Input Entities | maltego.Domain |
Output Entities | Phrase |
Short Description | Takes a Domain and searches across Breach Alerts. |
[Intel 471] Domain to IOC
Description
Takes a Domain translates to an IOC report.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Domain to IOC |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | rep-domaintoioc |
Input Entities | maltego.Domain |
Output Entities | Phrase |
Short Description | Takes a Domain translates to an IOC report. |
[Intel 471] GIR Name to Report
Description
GIR Name to Report based on GIR Path.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] GIR Name to Report |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | rep-girnametoreport |
Input Entities | intel471.girpath |
Output Entities | Phrase |
Short Description | GIR Name to Report based on GIR Path. |
[Intel 471] GIR Path to Report
Description
GIR Path to Report based on GIR Path.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] GIR Path to Report |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | rep-girpathtoreport |
Input Entities | intel471.girpath |
Output Entities | Phrase |
Short Description | GIR Path to Report based on GIR Path. |
[Intel 471] GIR to Breach Alert
Description
Takes a GIR and searches related Breach Alerts.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] GIR to Breach Alert |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | rep-girtobreachalert |
Input Entities | intel471.girpath |
Output Entities | Phrase |
Short Description | Takes a GIR and searches related Breach Alerts. |
[Intel 471] GIR to Name
Description
Takes a GIR value and converts to GIR Path Name.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] GIR to Name |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | rep-girtoname |
Input Entities | intel471.girpath |
Output Entities | Phrase |
Short Description | Takes a GIR value and converts to GIR Path Name. |
[Intel 471] IOC Converter
Description
Takes an IOC and converts it into a Domain, IP Address or URL.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] IOC Converter |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | rep-iocconverter |
Input Entities | intel471.maliciousioc |
Output Entities | Phrase |
Short Description | Takes an IOC and converts it into a Domain, IP Address or URL. |
[Intel 471] Phrase to Spot Report
Description
Takes a Phrase and searches across Spot Reports.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Phrase to Spot Report |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | rep-phrasetospot |
Input Entities | maltego.Phrase |
Output Entities | Phrase |
Short Description | Takes a Phrase and searches across Spot Reports. |
[Intel 471] Report Hash to Report
Description
Takes a Report Hash and generates its related Report.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Report Hash to Report |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | rep-reporthashtoreport |
Input Entities | intel471.reporthash |
Output Entities | Phrase |
Short Description | Takes a Report Hash and generates its related Report. |
[Intel 471] Report to Date
Description
Extracts the date from the Report.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Report to Date |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | rep-reporttodate |
Input Entities | intel471.report |
Output Entities | Phrase |
Short Description | Extracts the date from the Report. |
[Intel 471] Report to Entities
Description
Takes a Report and extracts its Entities.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Report to Entities |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | rep-reporttoentities |
Input Entities | intel471.report |
Output Entities | Phrase |
Short Description | Takes a Report and extracts its Entities. |
[Intel 471] Report to GIR Path
Description
Takes a Report and extracts the GIR Paths.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Report to GIR Path |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | rep-reporttogir |
Input Entities | intel471.report |
Output Entities | Phrase |
Short Description | Takes a Report and extracts the GIR Paths. |
[Intel 471] Report to Location
Description
Takes a Report and extracts location details.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Report to Location |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | rep-reporttolocation |
Input Entities | intel471.report |
Output Entities | Phrase |
Short Description | Takes a Report and extracts location details. |
Description
Takes a Report and generates its related reports via hash.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Report to Related |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | rep-reporttorelated |
Input Entities | intel471.report |
Output Entities | Phrase |
Short Description | Takes a Report and generates its related reports via hash. |
[Intel 471] Report to Report Subject
Description
Takes a Report and extracts the Report Subject.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Report to Report Subject |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | rep-reporttoreportsubject |
Input Entities | intel471.report |
Output Entities | Phrase |
Short Description | Takes a Report and extracts the Report Subject. |
Description
Takes a Report and extracts its Tags.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Report to Report Tags |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | rep-reporttoreporttags |
Input Entities | intel471.report |
Output Entities | Phrase |
Short Description | Takes a Report and extracts its Tags. |
[Intel 471] Report to Report Type
Description
Converts a Report to a Report Type.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Report to Report Type |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | rep-reporttoreporttype |
Input Entities | intel471.report |
Output Entities | Phrase |
Short Description | Converts a Report to a Report Type. |
[Intel 471] Report to Report URL
Description
Takes a Report and coverts it to its Titan URL.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Report to Report URL |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | rep-reporttoreporturl |
Input Entities | intel471.report |
Output Entities | Phrase |
Short Description | Takes a Report and coverts it to its Titan URL. |
Description
Extracts a list of Domains from Spot Report text.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Spot Report Entity Extract |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | rep-spotentityextract |
Input Entities | intel471.report |
Output Entities | Phrase |
Short Description | Extracts a list of Domains from Spot Report text. |
[Intel 471] Tag to Report
Description
Takes a Tag and searches across Reports.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Tag to Report |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | rep-tagtoreport |
Input Entities | intel471.tag |
Output Entities | Phrase |
Short Description | Takes a Tag and searches across Reports. |
[Intel 471] Website to Breach Alert
Description
Takes a Website and searches across Breach Alerts.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Website to Breach Alert |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | rep-websitetobreachalert |
Input Entities | maltego.Website |
Output Entities | Phrase |
Short Description | Takes a Website and searches across Breach Alerts. |
[Intel 471] CVE Product to Report
Description
CVE Product to Report.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] CVE Product to Report |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | vul-cveproducttoreport |
Input Entities | intel471.cveproduct |
Output Entities | Phrase |
Short Description | CVE Product to Report. |
[Intel 471] CVE Ref to Topic
Description
CVE Reference to Topic Thread.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] CVE Ref to Topic |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | vul-cvereftotopic |
Input Entities | intel471.titanurl |
Output Entities | Phrase |
Short Description | CVE Reference to Topic Thread. |
[Intel 471] CVE Report Status to CVE
Description
CVE Report Status to CVE.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] CVE Report Status to CVE |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | vul-cvereportstatustocve |
Input Entities | intel471.CVEReportStatus |
Output Entities | Phrase |
Short Description | CVE Report Status to CVE. |
[Intel 471] CVE Patch Status to CVE
Description
CVE Patch Status to CVE.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] CVE Patch Status to CVE |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | vul-cvestatustocve |
Input Entities | intel471.cvepatchstatus |
Output Entities | Phrase |
Short Description | CVE Patch Status to CVE. |
[Intel 471] CVE to GIR
Description
CVE to GIR requirements to allow pivoting.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] CVE to GIR |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | vul-cvetogir |
Input Entities | intel471.cve |
Output Entities | Phrase |
Short Description | CVE to GIR requirements to allow pivoting. |
[Intel 471] CVE to Maltego CVE
Description
Converts an Intel 471 CVE entity to a Maltego CVE entity.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] CVE to Maltego CVE |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | vul-cvetomaltegocve |
Input Entities | intel471.cve |
Output Entities | Phrase |
Short Description | Converts an Intel 471 CVE entity to a Maltego CVE entity. |
[Intel 471] CVE to Post Ref
Description
CVE to Reference Threads in the underground from CVE Report.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] CVE to Post Ref |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | vul-cvetopostref |
Input Entities | intel471.cve |
Output Entities | Phrase |
Short Description | CVE to Reference Threads in the underground from CVE Report. |
[Intel 471] CVE to Product
Description
CVE to Product.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] CVE to Product |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | vul-cvetoproduct |
Input Entities | intel471.cve |
Output Entities | Phrase |
Short Description | CVE to Product. |
[Intel 471] CVE to Report
Description
CVE to Report not Vulnerability.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] CVE to Report |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | vul-cvetoreport |
Input Entities | intel471.cve |
Output Entities | Phrase |
Short Description | CVE to Report not Vulnerability. |
[Intel 471] CVE to Report Status
Description
CVE to Report Status.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] CVE to Report Status |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | vul-cvetoreportstatus |
Input Entities | intel471.cve |
Output Entities | Phrase |
Short Description | CVE to Report Status. |
[Intel 471] CVE to Patch Status
Description
CVE to Patch Status.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] CVE to Patch Status |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | vul-cvetostatus |
Input Entities | intel471.cve |
Output Entities | Phrase |
Short Description | CVE to Patch Status. |
[Intel 471] CVE to Vendor
Description
CVE to Vendor.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] CVE to Vendor |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | vul-cvetovendor |
Input Entities | intel471.cve |
Output Entities | Phrase |
Short Description | CVE to Vendor. |
[Intel 471] CVE Vendor to Report
Description
CVE Vendor to Report.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] CVE Vendor to Report |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | vul-cvevendortoreport |
Input Entities | intel471.cvevendor |
Output Entities | Phrase |
Short Description | CVE Vendor to Report. |
[Intel 471] GIR to CVE
Description
Converts a GIR Path to CVE.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] GIR to CVE |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | vul-girtocve |
Input Entities | intel471.girpath |
Output Entities | Phrase |
Short Description | Converts a GIR Path to CVE. |
[Intel 471] Phrase to CVE
Description
Takes a Phrase and searches across CVE Reports.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Phrase to CVE |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | vul-phrasetocve |
Input Entities | maltego.Phrase |
Output Entities | Phrase |
Short Description | Takes a Phrase and searches across CVE Reports. |
[Intel 471] ProductToCVE
Description
Product to CVE.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] ProductToCVE |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | vul-producttocve |
Input Entities | intel471.cveproduct |
Output Entities | Phrase |
Short Description | Product to CVE. |
[Intel 471] Vendor to CVE
Description
Vendor to CVE.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Vendor to CVE |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | vul-vendortocve |
Input Entities | intel471.cvevendor |
Output Entities | Phrase |
Short Description | Vendor to CVE. |
[Intel 471] Actor to Alias
Description
Takes an Actor tied to a Forum and makes it generic for wider searching.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Actor to Alias |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-actortoalias |
Input Entities | intel471.actor |
Output Entities | Phrase |
Short Description | Takes an Actor tied to a Forum and makes it generic for wider searching. |
Description
Takes an Actor and extracts Contact Information.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Actor to Contact Info |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-actortocontactinfo |
Input Entities | intel471.actor |
Output Entities | Phrase |
Short Description | Takes an Actor and extracts Contact Information. |
[Intel 471] Actor to Entity Link
Description
Actor to Entity Link.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Actor to Entity Link |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-actortoentitylink |
Input Entities | intel471.actor |
Output Entities | Phrase |
Short Description | Actor to Entity Link. |
[Intel 471] Actor to Forum
Description
Takes an Actor entity and extracts the Forum into a Website entity.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Actor to Forum |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-actortoforum |
Input Entities | intel471.actor |
Output Entities | Phrase |
Short Description | Takes an Actor entity and extracts the Forum into a Website entity. |
[Intel 471] Actor to Instant Message
Description
Takes an Actor and searches for Instant Messages.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Message Limit | int | 2000 | true | false | false |
Result filter | string | | true | false | false |
Search Query | string | | true | true | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Actor to Instant Message |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-actortoinstantmessage |
Input Entities | intel471.instantmessageactor |
Output Entities | Phrase |
Short Description | Takes an Actor and searches for Instant Messages. |
[Intel 471] Actor to Private Message
Description
Takes an Actor and searches for Private Messages.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Message Limit | int | 2000 | true | false | false |
Result filter | string | | true | false | false |
Search Query | string | | true | true | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Actor to Private Message |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-actortoprivatemessage |
Input Entities | intel471.actor |
Output Entities | Phrase |
Short Description | Takes an Actor and searches for Private Messages. |
[Intel 471] Actor to Thread
Description
Searches the Forum for Threads where the Actor has posted.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Search Query | string | | true | true | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Actor to Thread |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-actortothread |
Input Entities | intel471.actor |
Output Entities | Phrase |
Short Description | Searches the Forum for Threads where the Actor has posted. |
[Intel 471] Alias to Actor
Description
Takes an Alias and converts it to an Actor or Report entity.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Alias to Actor |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-aliastoactor |
Input Entities | maltego.Alias |
Output Entities | Phrase |
Short Description | Takes an Alias and converts it to an Actor or Report entity. |
[Intel 471] Alias to Post
Description
Searches an Alias across all Posts.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Message Limit | int | 2000 | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Alias to Post |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-aliastopost |
Input Entities | maltego.Alias |
Output Entities | Phrase |
Short Description | Searches an Alias across all Posts. |
[Intel 471] Bitcoin Address to Entity
Description
Bitcoin Address to Entity search.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Bitcoin Address to Entity |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-btcaddresstoentity |
Input Entities | maltego.BTCAddress |
Output Entities | Phrase |
Short Description | Bitcoin Address to Entity search. |
[Intel 471] Bitcoin to Post
Description
Searches Threads looking for Bitcoin Addresses.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Message Limit | int | 2000 | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Bitcoin to Post |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-bitcointopost |
Input Entities | maltego.BTCAddress |
Output Entities | Phrase |
Short Description | Searches Threads looking for Bitcoin Addresses. |
[Intel 471] Crypto Currency to Post
Description
Searches Threads looking for a Crypto Currency entity for re-mining.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Message Limit | int | 2000 | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Crypto Currency to Post |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-cryptocurrencytopost |
Input Entities | intel471.cryptocurrency |
Output Entities | Phrase |
Short Description | Searches Threads looking for a Crypto Currency entity for re-mining. |
[Intel 471] Domain to Entity
Description
Domain to Entity search.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Domain to Entity |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-domaintoentity |
Input Entities | maltego.Domain |
Output Entities | Phrase |
Short Description | Domain to Entity search. |
[Intel 471] Email to Entity
Description
Email Address to Entity search.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Email to Entity |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-emailtoentity |
Input Entities | maltego.EmailAddress |
Output Entities | Phrase |
Short Description | Email Address to Entity search. |
[Intel 471] Entity to Actor Link
Description
Converts an Entity to an Actor Link.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Entity to Actor Link |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-entitytoactorlink |
Input Entities | intel471.Entity |
Output Entities | Phrase |
Short Description | Converts an Entity to an Actor Link. |
[Intel 471] Entity to Alias
Description
Converts an Entity to an Alias.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Entity to Alias |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-entitytoalias |
Input Entities | intel471.Entity |
Output Entities | Phrase |
Short Description | Converts an Entity to an Alias. |
[Intel 471] IM Channel Actor to Alias
Description
Converts an Instant Message Channel Actor to an Alias.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] IM Channel Actor to Alias |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-imchannelactortoalias |
Input Entities | intel471.imchannelactor |
Output Entities | Phrase |
Short Description | Converts an Instant Message Channel Actor to an Alias. |
[Intel 471] IM Channel Actor to Instant Message
Description
Takes an Instant Message Channel Actor and searches for Instant Messages.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Message Limit | int | 2000 | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] IM Channel Actor to Instant Message |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-imchannelactortoinstantmessage |
Input Entities | intel471.imchannelactor |
Output Entities | Phrase |
Short Description | Takes an Instant Message Channel Actor and searches for Instant Messages. |
[Intel 471] IM Channel to Instant Message
Description
Takes an Instant Message Channel and searches for Instant Messages.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Message Limit | int | 2000 | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] IM Channel to Instant Message |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-imchanneltoinstantmessage |
Input Entities | intel471.IMChannel |
Output Entities | Phrase |
Short Description | Takes an Instant Message Channel and searches for Instant Messages. |
Description
Extracts Entities from an Instant Message.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Instant Message Entity Extract |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-imentityextract |
Input Entities | intel471.instantmessage |
Output Entities | Phrase |
Short Description | Extracts Entities from an Instant Message. |
[Intel 471] IM Server Actor to Alias
Description
Converts an Instant Message Server Actor to an Alias.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] IM Server Actor to Alias |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-imserveractortoalias |
Input Entities | intel471.instantmessageactor |
Output Entities | Phrase |
Short Description | Converts an Instant Message Server Actor to an Alias. |
[Intel 471] IM Server to Instant Message
Description
Takes an Instant Message Server and searches for Instant Messages.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Message Limit | int | 2000 | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] IM Server to Instant Message |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-imservertoinstantmessage |
Input Entities | intel471.IMServer |
Output Entities | Phrase |
Short Description | Takes an Instant Message Server and searches for Instant Messages. |
[Intel 471] IM to Channel
Description
Converts an Instant Message to a Channel.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] IM to Channel |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-imtochannel |
Input Entities | intel471.instantmessage |
Output Entities | Phrase |
Short Description | Converts an Instant Message to a Channel. |
[Intel 471] Instant Message to Instant Message Channel Actor
Description
Extracts the Actor from the specific Instant Message Channel.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Instant Message to Instant Message Channel Actor |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-imtoimchannelactor |
Input Entities | intel471.instantmessage |
Output Entities | Phrase |
Short Description | Extracts the Actor from the specific Instant Message Channel. |
[Intel 471] Instant Message to Instant Message Context
Description
Extracts the Context surrounding the Instant Message.
API Key | string | | true | false | false |
Date Regex | string | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Instant Message to Instant Message Context |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-imtoimcontext |
Input Entities | intel471.instantmessage |
Output Entities | Phrase |
Short Description | Extracts the Context surrounding the Instant Message. |
[Intel 471] Instant Message to Instant Message Server Actor
Description
Instant Message Actor raised from Channel to Server level.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Instant Message to Instant Message Server Actor |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-imtoimserveractor |
Input Entities | intel471.instantmessage |
Output Entities | Phrase |
Short Description | Instant Message Actor raised from Channel to Server level. |
[Intel 471] IM to Server
Description
Converts an Instant Message to a Server (or a Service if no Server is available).
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] IM to Server |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-imtoserver |
Input Entities | intel471.instantmessage |
Output Entities | Phrase |
Short Description | Converts an Instant Message to a Server (or a Service if no Server is available). |
[Intel 471] IP Address to Entity
Description
IP Address to Entity search.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] IP Address to Entity |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-iptoentity |
Input Entities | maltego.IPv4Address |
Output Entities | Phrase |
Short Description | IP Address to Entity search. |
[Intel 471] Message to Thread
Description
Takes a Message entity and converts it back to its Thread.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Message to Thread |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-messagetothread |
Input Entities | intel471.post |
Output Entities | Phrase |
Short Description | Takes a Message entity and converts it back to its Thread. |
Description
Extracts Entities from a Private Message.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Private Message Entity Extract |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-pmentityextract |
Input Entities | intel471.privatemessage |
Output Entities | Phrase |
Short Description | Extracts Entities from a Private Message. |
[Intel 471] Private Message to Receiver
Description
Extracts the Receiver from the Private Message.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Private Message to Receiver |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-pmtoreceiver |
Input Entities | intel471.privatemessage |
Output Entities | Phrase |
Short Description | Extracts the Receiver from the Private Message. |
[Intel 471] Private Message to Sender
Description
Extracts the Sender from the Private Message
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Private Message to Sender |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-pmtosender |
Input Entities | intel471.privatemessage |
Output Entities | Phrase |
Short Description | Extracts the Sender from the Private Message |
[Intel 471] Phrase to Entity
Description
Phrase to Entity search.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Phrase to Entity |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-phrasetoentity |
Input Entities | maltego.Phrase |
Output Entities | Phrase |
Short Description | Phrase to Entity search. |
[Intel 471] Phrase to Instant Message
Description
Searches Instant Messages for the Phrase.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Message Limit | int | 2000 | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Phrase to Instant Message |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-phrasetoinstantmessage |
Input Entities | maltego.Phrase |
Output Entities | Phrase |
Short Description | Searches Instant Messages for the Phrase. |
[Intel 471] Phrase to Post
Description
Searches Posts for the Phrase.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Message Limit | int | 2000 | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Phrase to Post |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-phrasetopost |
Input Entities | maltego.Phrase |
Output Entities | Phrase |
Short Description | Searches Posts for the Phrase. |
[Intel 471] Phrase to Private Message
Description
Searches Private Messages for the Phrase.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Message Limit | int | 2000 | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Phrase to Private Message |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-phrasetoprivatemessage |
Input Entities | maltego.Phrase |
Output Entities | Phrase |
Short Description | Searches Private Messages for the Phrase. |
Description
Extracts Entities from a Post.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Post Entity Extract |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-postentityextract |
Input Entities | intel471.post |
Output Entities | Phrase |
Short Description | Extracts Entities from a Post. |
[Intel 471] Post to Alias
Description
Converts a Post back to its Alias based on the Post Author
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Post to Alias |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-posttoalias |
Input Entities | intel471.post |
Output Entities | Phrase |
Short Description | Converts a Post back to its Alias based on the Post Author |
[Intel 471] Post to Date
Description
Translates a Message or Post to a date.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Post to Date |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-posttodate |
Input Entities | intel471.post |
Output Entities | Phrase |
Short Description | Translates a Message or Post to a date. |
[Intel 471] Post to Forum Member
Description
Takes a Post and converts to a Forum Member.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Post to Forum Member |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-posttoforummember |
Input Entities | intel471.post |
Output Entities | Phrase |
Short Description | Takes a Post and converts to a Forum Member. |
[Intel 471] Thread to Actor
Description
Takes a Thread and converts to all Actors posting on that Thread.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Thread to Actor |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-threadtoactor |
Input Entities | intel471.thread |
Output Entities | Phrase |
Short Description | Takes a Thread and converts to all Actors posting on that Thread. |
[Intel 471] Thread to Actor Post
Description
Adjust the property field to allow for extraction of Posts linked to actor_handle.
API Key | string | | true | false | false |
Actor Handle | string | | true | true | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Message Limit | int | 2000 | true | false | false |
Result filter | string | | true | false | false |
Search Query | string | | true | true | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Thread to Actor Post |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-threadtoactorpost |
Input Entities | intel471.thread |
Output Entities | Phrase |
Short Description | Adjust the property field to allow for extraction of Posts linked to actor_handle. |
[Intel 471] Thread to Author
Description
Extracts the Author direct from the Topic.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Thread to Author |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-threadtoauthor |
Input Entities | intel471.thread |
Output Entities | Phrase |
Short Description | Extracts the Author direct from the Topic. |
[Intel 471] Thread to Forum
Description
Converts a Thread back into its parent Forum.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Thread to Forum |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-threadtoforum |
Input Entities | intel471.thread |
Output Entities | Phrase |
Short Description | Converts a Thread back into its parent Forum. |
[Intel 471] Thread to Possible Associates
Description
Determines collisions between Threat Actors on Threads.
API Key | string | | true | false | false |
Date Regex | string | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Thread to Possible Associates |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-threadtopossibleassociates |
Input Entities | intel471.post |
Output Entities | Phrase |
Short Description | Determines collisions between Threat Actors on Threads. |
[Intel 471] Thread to Similar Topic
Description
Takes a Thread and searches across Similar Topics.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Thread to Similar Topic |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | adv-threadtosimilartopic |
Input Entities | intel471.thread |
Output Entities | Phrase |
Short Description | Takes a Thread and searches across Similar Topics. |
[Intel 471] Date Stripper
Description
Converts a date entity and strips away the day or month, depending on input.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Date Stripper |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | gen-datestripper |
Input Entities | maltego.DateTime |
Output Entities | Phrase |
Short Description | Converts a date entity and strips away the day or month, depending on input. |
[Intel 471] Domain to Post
Description
Takes a Domain and searches across Posts.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Message Limit | int | 2000 | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Domain to Post |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | gen-domaintopost |
Input Entities | maltego.Domain |
Output Entities | Phrase |
Short Description | Takes a Domain and searches across Posts. |
[Intel 471] Email to Post
Description
Takes an Email Address and searches across Posts.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Message Limit | int | 2000 | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Email to Post |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | gen-emailtopost |
Input Entities | maltego.EmailAddress |
Output Entities | Phrase |
Short Description | Takes an Email Address and searches across Posts. |
[Intel 471] File to Post
Description
Takes a File and searches across Posts.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Message Limit | int | 2000 | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] File to Post |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | gen-filetopost |
Input Entities | maltego.File |
Output Entities | Phrase |
Short Description | Takes a File and searches across Posts. |
[Intel 471] IP to Post
Description
Takes an IP Address and searches across Posts.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Message Limit | int | 2000 | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] IP to Post |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | gen-iptopost |
Input Entities | maltego.IPv4Address |
Output Entities | Phrase |
Short Description | Takes an IP Address and searches across Posts. |
[Intel 471] URL to Post
Description
Takes a URL and searches across Posts.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Message Limit | int | 2000 | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] URL to Post |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | gen-urltopost |
Input Entities | maltego.URL |
Output Entities | Phrase |
Short Description | Takes a URL and searches across Posts. |
[Intel 471] Website to Actor
Description
Take a Website and searches for Actors on that Website.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Website to Actor |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | gen-websitetoactor |
Input Entities | maltego.Website |
Output Entities | Phrase |
Short Description | Take a Website and searches for Actors on that Website. |
[Intel 471] Website to Post
Description
Take a Website and searches across Posts.
API Key | string | | true | false | false |
Date Range | daterange | | true | false | false |
Email Address | string | | true | false | false |
Message Limit | int | 2000 | true | false | false |
Result filter | string | | true | false | false |
Show Entity For Empty Results | boolean | true | true | false | false |
Show RAG Bookmarks based on entity’s age | boolean | true | true | false | false |
Show the date inside entity’s caption | boolean | true | true | false | false |
Show the date on entity’s link line | boolean | false | true | false | false |
Display Name | [Intel 471] Website to Post |
Owner | Intel 471 Inc. |
Author | maltegotransforms@intel471.com |
Data Source | Intel 471 |
Transform Name | gen-websitetopost |
Input Entities | maltego.Website |
Output Entities | Phrase |
Short Description | Take a Website and searches across Posts. |