Maltego Data
- Maltego Data Pass and Connectors
  - Data Pass and Connectors for Maltego Community Edition (version 4.8.0)
- Maltego Standard Transforms
- Standard Transforms Add-on (CTAS) Server Transforms
  - Maltego Standard Transforms Add-on (CTAS) Server Transforms
- Data Hub Items

Intel 471 Enterprise

Modified on: Tue, 10 Dec, 2024 at 9:48 PM

Overview

Intel 471 provides in-depth and globally relevant coverage and tracking of sophisticated, financially motivated cybercriminals, hacktivists and other threats targeting organizations, their customers, employees, and suppliers. The Intel 471 Transforms in Maltego supports cyber security teams, law enforcement agencies, Trust & Safety investigators, and researchers in querying and mapping deep and dark web data and threat intelligence in a visualized graph.

Intel 471 is active in places where entry is highly guarded such as underground marketplaces and chat rooms.

With the Intel 471 data integration in Maltego, investigators can gain insights in various cybersecurity disciplines such as deep and dark web investigations, brand protection, due diligence, fraud, insider threat, vulnerability management, and more.

Through Intel 471, investigators can obtain near real-time visibility into key actors, assets, issues, organizations, and other criminal entities, as well as evidence from within the cyber underground—all via a flexible, annual subscription that is tailored to individual project needs and budgets.

Be sure to visit our blog for further insights. For a brief introduction to the updated Intel 471 Maltego Transforms read Enrich Threat Intelligence and Criminal Investigations with Intel 471 Transforms and Data Subscriptions.

You can read more about the Intel 471 Transforms for Maltego on our website here.

Updates and Changelog

Intel471 Enterprise Transforms Update: 06 July 2022.

New Transforms and Transform Properties

We have introduced new Transforms and extraction capabilities to cater to Breach Alerts, Malware Reports, and Credentials Intelligence.

Through the provision of new Transform properties, we have provided users with the capability to show dates on Entity link lines instead of within the caption of the Entity itself. Additionally, we have added the capability to turn off the Intel 471 No Entity icon to help reduce noise in large graphs.

We have also provided the ability to turn off the RAGB (Red, Amber, Green, and Blue) bookmarking to support alternative bookmark use cases and have introduced a second layer of filtering for returned results that uses regex to allow for more advanced use cases.

Updates

Minor updates have been made to naming conventions for some Transforms and de-duplication of properties for some Entities.

New Transforms:

GIR to Malware Report
GIR to Credentialset
GIR to Breachalert
Malware Family to Malware Report
Malware Report to Alias
Malware Report to GIR
Malware Report to Malware Family
Credentialset to Date
Credentialset to GIR
Credentialset to Titanurl
Credentialset to Victim
Domain to Credentialset
Phrase to Credentialset
Phrase to Malware Report
Phrase to Breachalert
Website to Breachalert

Re-named Transforms

"MessageToTopic" re-named to "MessageToThread"

Additionally all Transforms and respective URLs have been re-named so that they match the pattern used by the library's registry.

This means that the "dot" (.) has been replaced with the "dash" (-) within the name, and the prefix was added to each URL, for example:

Name: "Adv.AliasToActor" changes to "adv-aliastoactor"
URL: "https://maltego-transformations.intel471.com/run/aliastoactor" changes to "https://maltego-transformations-test.intel471.com/run/adv-aliastoactor".

Changed Output Entity Types

Output Entity changed from intel471.URL into maltego.URL for the following Transforms:

URL to Post
URL to Report
URL to Malware Event

New Transform Settings

-entity_date - Toggle showing the date inside Entity's caption
-link_date - Toggle showing the date on Entity's link line
-no_results_entity - Toggle showing an Entity representing empty results
-rag_bookmarks - Toggle showing RAG Bookmarks based on Entity's age
-result_filter - Additionally filter results returned by the API

Intel 471 Transforms

[Intel 471] Actor to Report

Description

Tries to identify Reports for a specific Actor/Forum combination.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Actor to Report
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-actortoreport
Input Entities	intel471.actor
Output Entities	Phrase
Short Description	Tries to identify Reports for a specific Actor/Forum combination.

[Intel 471] Alias to Report

Description

Takes an Alias and converts it to a Report type.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Alias to Report
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-aliastoreport
Input Entities	maltego.Alias
Output Entities	Phrase
Short Description	Takes an Alias and converts it to a Report type.

[Intel 471] Thread to Titan URL

Description

Extracts the Titan URL from the Forum Thread.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Thread to Titan URL
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-threadtotitanurl
Input Entities	intel471.thread
Output Entities	Phrase
Short Description	Extracts the Titan URL from the Forum Thread.

[Intel 471] Credential Set to Date

Description

Translates Credential Set to a date.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Credential Set to Date
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	crd-credentialsettodate
Input Entities	intel471.credentialset
Output Entities	Phrase
Short Description	Translates Credential Set to a date.

[Intel 471] Event to GIR

Description

Malware Event to GIR.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Event to GIR
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	mal-eventtogir
Input Entities	intel471.malwareevent
Output Entities	Phrase
Short Description	Malware Event to GIR.

[Intel 471] Credential Set to GIR

Description

Takes a Credential Set and extracts GIR info

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Credential Set to GIR
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	crd-credentialsettogir
Input Entities	intel471.credentialset
Output Entities	Phrase
Short Description	Takes a Credential Set and extracts GIR info

[Intel 471] Credential Set to Titan URL

Description

Extracts the Titan URL from the Credential Set.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Credential Set to Titan URL
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	crd-credentialsettotitanurl
Input Entities	intel471.credentialset
Output Entities	Phrase
Short Description	Extracts the Titan URL from the Credential Set.

[Intel 471] Credential Set to Victim

Description

Takes a Credential Set and extracts victims’ org names and URLs.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Credential Set to Victim
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	crd-credentialsettovictim
Input Entities	intel471.credentialset
Output Entities	Phrase
Short Description	Takes a Credential Set and extracts victims’ org names and URLs.

[Intel 471] Phrase to Credential Set

Description

Takes a Phrase and searches across Credential Sets.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Phrase to Credential Set
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	crd-phrasetocredentialset
Input Entities	maltego.Phrase
Output Entities	Phrase
Short Description	Takes a Phrase and searches across Credential Sets.

[Intel 471] Domain to Credential Set

Description

Takes a Domain and searches across Credential Sets.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Domain to Credential Set
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	crd-domaintocredentialset
Input Entities	maltego.Domain
Output Entities	Phrase
Short Description	Takes a Domain and searches across Credential Sets.

[Intel 471] GIR Path to Credential Set

Description

Takes GIR Path and searches across Credential Sets.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] GIR Path to Credential Set
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	crd-girpathtocredentialset
Input Entities	intel471.girpath
Output Entities	Phrase
Short Description	Takes GIR Path and searches across Credential Sets.

[Intel 471] Domain to Report

Description

Takes a Domain and searches across Reports.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Domain to Report
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	gen-domaintoreport
Input Entities	maltego.Domain
Output Entities	Phrase
Short Description	Takes a Domain and searches across Reports.

[Intel 471] Email to Report

Description

Takes an Email Address and searches across Reports.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Email to Report
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	gen-emailtoreport
Input Entities	maltego.EmailAddress
Output Entities	Phrase
Short Description	Takes an Email Address and searches across Reports.

[Intel 471] File to Report

Description

Takes a File and searches across Reports.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] File to Report
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	gen-filetoreport
Input Entities	maltego.File
Output Entities	Phrase
Short Description	Takes a File and searches across Reports.

[Intel 471] IP Address to Report

Description

Takes an IP Address and searches across Reports.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] IP Address to Report
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	gen-ipaddresstoreport
Input Entities	maltego.IPv4Address
Output Entities	Phrase
Short Description	Takes an IP Address and searches across Reports.

[Intel 471] IP to IOC

Description

Takes an IP Address and searches across IOCs.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] IP to IOC
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	gen-iptoioc
Input Entities	maltego.IPv4Address
Output Entities	Phrase
Short Description	Takes an IP Address and searches across IOCs.

[Intel 471] Phrase to IOC

Description

Takes a Phrase and searches across IOCs.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Phrase to IOC
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	gen-phrasetoioc
Input Entities	maltego.Phrase
Output Entities	Phrase
Short Description	Takes a Phrase and searches across IOCs.

[Intel 471] Phrase to Report

Description

Takes a Phrase and searches across Reports.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Phrase to Report
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	gen-phrasetoreport
Input Entities	maltego.Phrase
Output Entities	Phrase
Short Description	Takes a Phrase and searches across Reports.

[Intel 471] URL to Report

Description

Takes a URL and searches across Reports.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] URL to Report
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	gen-urltoreport
Input Entities	maltego.URL
Output Entities	Phrase
Short Description	Takes a URL and searches across Reports.

[Intel 471] Website to IOC

Description

Takes a Website and searches for IOCs.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Website to IOC
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	gen-websitetoioc
Input Entities	maltego.Website
Output Entities	Phrase
Short Description	Takes a Website and searches for IOCs.

[Intel 471] Website to Information Report

Description

Takes a Website and searches across Reports.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Website to Information Report
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	gen-websitetoreport
Input Entities	maltego.Website
Output Entities	Phrase
Short Description	Takes a Website and searches across Reports.

[Intel 471] Botnet Name to Alias

Description

Converts a Botnet name to an Alias.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Botnet Name to Alias
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	mal-botnetnametoalias
Input Entities	intel471.malwareeventsettings
Output Entities	Phrase
Short Description	Converts a Botnet name to an Alias.

[Intel 471] Botnet Setting to Key

Description

Extracts Keys from Botnet settings.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Botnet Setting to Key
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	mal-botnetsettingtokey
Input Entities	intel471.malwareeventsettings
Output Entities	Phrase
Short Description	Extracts Keys from Botnet settings.

[Intel 471] Domain to Malware Event

Description

Takes a Domain and searches across Malware Events.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Domain to Malware Event
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	mal-domaintomalwareevent
Input Entities	maltego.Domain
Output Entities	Phrase
Short Description	Takes a Domain and searches across Malware Events.

[Intel 471] Event to Controller

Description

Event to Controller: Obtains Controller details.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Event to Controller
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	mal-eventtocontroller
Input Entities	intel471.malwareevent
Output Entities	Phrase
Short Description	Event to Controller: Obtains Controller details.

[Intel 471] Event to Event Type

Description

Event to Event Type: Based on our extraction.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Event to Event Type
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	mal-eventtoeventtype
Input Entities	intel471.malwareevent
Output Entities	Phrase
Short Description	Event to Event Type: Based on our extraction.

[Intel 471] Event to File

Description

Extracts MD5, SHA1 and SHA256 hashes from Events.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Event to File
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	mal-eventtohash
Input Entities	intel471.malwareevent
Output Entities	Phrase
Short Description	Extracts MD5, SHA1 and SHA256 hashes from Events.

[Intel 471] Event to Malware Family

Description

Converts an Event to a Malware Family.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Event to Malware Family
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	mal-eventtomalwarefamily
Input Entities	intel471.malwareevent
Output Entities	Phrase
Short Description	Converts an Event to a Malware Family.

[Intel 471] Event to Mitre

Description

Event to Mitre Attack Framework where available.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Event to Mitre
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	mal-eventtomitre
Input Entities	intel471.malwareevent
Output Entities	Phrase
Short Description	Event to Mitre Attack Framework where available.

[Intel 471] Event to Receiver

Description

Converts an Event to Spam Receivers.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Event to Receiver
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	mal-eventtoreceiver
Input Entities	intel471.malwareevent
Output Entities	Phrase
Short Description	Converts an Event to Spam Receivers.

[Intel 471] Event to Sender

Description

Converts an Event to Spam Sender.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Event to Sender
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	mal-eventtosender
Input Entities	intel471.malwareevent
Output Entities	Phrase
Short Description	Converts an Event to Spam Sender.

[Intel 471] Event to Settings

Description

Event to Settings configuration.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Event to Settings
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	mal-eventtosettings
Input Entities	intel471.malwareevent
Output Entities	Phrase
Short Description	Event to Settings configuration.

[Intel 471] Event Type to Event

Description

Converts an Event Type to an Event.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Event Type to Event
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	mal-eventtypetoevent
Input Entities	intel471.malwareeventtype
Output Entities	Phrase
Short Description	Converts an Event Type to an Event.

[Intel 471] File to Malware Event

Description

Takes a File and searches across Malware Events.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] File to Malware Event
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	mal-filetomalwareevent
Input Entities	maltego.File
Output Entities	Phrase
Short Description	Takes a File and searches across Malware Events.

[Intel 471] GIR to Malware Event

Description

GIR to Malware Events : Obtains Events based on GIR Path number.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] GIR to Malware Event
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	mal-girtomalwareevent
Input Entities	intel471.girpath
Output Entities	Phrase
Short Description	GIR to Malware Events : Obtains Events based on GIR Path number.

[Intel 471] Phrase to Malware Report

Description

Takes a Phrase and searches across Malware Reports.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Phrase to Malware Report
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	mal-phrasetomalwarereport
Input Entities	maltego.Phrase
Output Entities	Phrase
Short Description	Takes a Phrase and searches across Malware Reports.

[Intel 471] GIR to Malware Report

Description

Takes a GIR path and searches related Malware Reports.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] GIR to Malware Report
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	mal-girtomalwarereport
Input Entities	intel471.girpath
Output Entities	Phrase
Short Description	Takes a GIR path and searches related Malware Reports.

[Intel 471] IP to Malware Event

Description

Takes an IP Address and searches across Malware Events.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] IP to Malware Event
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	mal-iptomalwareevent
Input Entities	maltego.IPv4Address
Output Entities	Phrase
Short Description	Takes an IP Address and searches across Malware Events.

[Intel 471] Malware Family to Event

Description

Converts a Malware Family to an Event.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Malware Family to Event
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	mal-malwarefamilytoevent
Input Entities	intel471.malwarefamily
Output Entities	Phrase
Short Description	Converts a Malware Family to an Event.

[Intel 471] Malware Family to Malware Report

Description

Takes a Malware Family and searches across Malware Reports.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Malware Family to Malware Report
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	mal-malwarefamilytomalwarereport
Input Entities	intel471.malwarefamily
Output Entities	Phrase
Short Description	Takes a Malware Family and searches across Malware Reports.

[Intel 471] Malware Report to Alias

Description

Takes a Malware Report and extracts adversaries.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Malware Report to Alias
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	mal-malwarereporttoalias
Input Entities	intel471.malwarereport
Output Entities	Phrase
Short Description	Takes a Malware Report and extracts adversaries.

[Intel 471] Malware Report to GIR Path

Description

Takes a Malware Report and extracts the GIR Paths.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Malware Report to GIR Path
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	mal-malwarereporttogir
Input Entities	intel471.malwarereport
Output Entities	Phrase
Short Description	Takes a Malware Report and extracts the GIR Paths.

[Intel 471] Malware Report to Malware Family

Description

Converts a Malware Report to a Malware Family.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Malware Report to Malware Family
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	mal-malwarereporttomalwarefamily
Input Entities	intel471.malwarereport
Output Entities	Phrase
Short Description	Converts a Malware Report to a Malware Family.

[Intel 471] Phrase to Malware Event

Description

Takes a Phrase and searches across Malware Events.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Phrase to Malware Event
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	mal-phrasetomalwareevent
Input Entities	maltego.Phrase
Output Entities	Phrase
Short Description	Takes a Phrase and searches across Malware Events.

[Intel 471] URL to Malware Event

Description

Takes a URL and searches across Malware Events.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] URL to Malware Event
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	mal-urltomalwareevent
Input Entities	maltego.URL
Output Entities	Phrase
Short Description	Takes a URL and searches across Malware Events.

[Intel 471] Breach Alert to Alias

Description

Takes a Breach Alert and converts it to an Alias entity.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Breach Alert to Alias
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	rep-breachalerttoalias
Input Entities	intel471.breachalert
Output Entities	Phrase
Short Description	Takes a Breach Alert and converts it to an Alias entity.

[Intel 471] Breach Alert to Victim

Description

Takes a Breach Alert and extracts victims’ org names and URLs.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Breach Alert to Victim
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	rep-breachalerttovictim
Input Entities	intel471.breachalert
Output Entities	Phrase
Short Description	Takes a Breach Alert and extracts victims’ org names and URLs.

[Intel 471] Phrase to Breach Alert

Description

Takes a Phrase and searches across Breach Alerts.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Phrase to Breach Alert
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	rep-phrasetobreachalert
Input Entities	maltego.Phrase
Output Entities	Phrase
Short Description	Takes a Phrase and searches across Breach Alerts.

[Intel 471] Domain to Breach Alert

Description

Takes a Domain and searches across Breach Alerts.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Domain to Breach Alert
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	rep-domaintobreachalert
Input Entities	maltego.Domain
Output Entities	Phrase
Short Description	Takes a Domain and searches across Breach Alerts.

[Intel 471] Domain to IOC

Description

Takes a Domain translates to an IOC report.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Domain to IOC
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	rep-domaintoioc
Input Entities	maltego.Domain
Output Entities	Phrase
Short Description	Takes a Domain translates to an IOC report.

[Intel 471] GIR Name to Report

Description

GIR Name to Report based on GIR Path.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] GIR Name to Report
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	rep-girnametoreport
Input Entities	intel471.girpath
Output Entities	Phrase
Short Description	GIR Name to Report based on GIR Path.

[Intel 471] GIR Path to Report

Description

GIR Path to Report based on GIR Path.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] GIR Path to Report
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	rep-girpathtoreport
Input Entities	intel471.girpath
Output Entities	Phrase
Short Description	GIR Path to Report based on GIR Path.

[Intel 471] GIR to Breach Alert

Description

Takes a GIR and searches related Breach Alerts.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] GIR to Breach Alert
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	rep-girtobreachalert
Input Entities	intel471.girpath
Output Entities	Phrase
Short Description	Takes a GIR and searches related Breach Alerts.

[Intel 471] GIR to Name

Description

Takes a GIR value and converts to GIR Path Name.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] GIR to Name
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	rep-girtoname
Input Entities	intel471.girpath
Output Entities	Phrase
Short Description	Takes a GIR value and converts to GIR Path Name.

[Intel 471] IOC Converter

Description

Takes an IOC and converts it into a Domain, IP Address or URL.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] IOC Converter
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	rep-iocconverter
Input Entities	intel471.maliciousioc
Output Entities	Phrase
Short Description	Takes an IOC and converts it into a Domain, IP Address or URL.

[Intel 471] Phrase to Spot Report

Description

Takes a Phrase and searches across Spot Reports.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Phrase to Spot Report
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	rep-phrasetospot
Input Entities	maltego.Phrase
Output Entities	Phrase
Short Description	Takes a Phrase and searches across Spot Reports.

[Intel 471] Report Hash to Report

Description

Takes a Report Hash and generates its related Report.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Report Hash to Report
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	rep-reporthashtoreport
Input Entities	intel471.reporthash
Output Entities	Phrase
Short Description	Takes a Report Hash and generates its related Report.

[Intel 471] Report to Date

Description

Extracts the date from the Report.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Report to Date
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	rep-reporttodate
Input Entities	intel471.report
Output Entities	Phrase
Short Description	Extracts the date from the Report.

[Intel 471] Report to Entities

Description

Takes a Report and extracts its Entities.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Report to Entities
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	rep-reporttoentities
Input Entities	intel471.report
Output Entities	Phrase
Short Description	Takes a Report and extracts its Entities.

[Intel 471] Report to GIR Path

Description

Takes a Report and extracts the GIR Paths.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Report to GIR Path
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	rep-reporttogir
Input Entities	intel471.report
Output Entities	Phrase
Short Description	Takes a Report and extracts the GIR Paths.

[Intel 471] Report to Location

Description

Takes a Report and extracts location details.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Report to Location
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	rep-reporttolocation
Input Entities	intel471.report
Output Entities	Phrase
Short Description	Takes a Report and extracts location details.

Description

Takes a Report and generates its related reports via hash.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Report to Related
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	rep-reporttorelated
Input Entities	intel471.report
Output Entities	Phrase
Short Description	Takes a Report and generates its related reports via hash.

[Intel 471] Report to Report Subject

Description

Takes a Report and extracts the Report Subject.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Report to Report Subject
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	rep-reporttoreportsubject
Input Entities	intel471.report
Output Entities	Phrase
Short Description	Takes a Report and extracts the Report Subject.

[Intel 471] Report to Report Tags

Description

Takes a Report and extracts its Tags.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Report to Report Tags
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	rep-reporttoreporttags
Input Entities	intel471.report
Output Entities	Phrase
Short Description	Takes a Report and extracts its Tags.

[Intel 471] Report to Report Type

Description

Converts a Report to a Report Type.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Report to Report Type
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	rep-reporttoreporttype
Input Entities	intel471.report
Output Entities	Phrase
Short Description	Converts a Report to a Report Type.

[Intel 471] Report to Report URL

Description

Takes a Report and coverts it to its Titan URL.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Report to Report URL
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	rep-reporttoreporturl
Input Entities	intel471.report
Output Entities	Phrase
Short Description	Takes a Report and coverts it to its Titan URL.

[Intel 471] Spot Report Entity Extract

Description

Extracts a list of Domains from Spot Report text.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Spot Report Entity Extract
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	rep-spotentityextract
Input Entities	intel471.report
Output Entities	Phrase
Short Description	Extracts a list of Domains from Spot Report text.

[Intel 471] Tag to Report

Description

Takes a Tag and searches across Reports.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Tag to Report
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	rep-tagtoreport
Input Entities	intel471.tag
Output Entities	Phrase
Short Description	Takes a Tag and searches across Reports.

[Intel 471] Website to Breach Alert

Description

Takes a Website and searches across Breach Alerts.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Website to Breach Alert
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	rep-websitetobreachalert
Input Entities	maltego.Website
Output Entities	Phrase
Short Description	Takes a Website and searches across Breach Alerts.

[Intel 471] CVE Product to Report

Description

CVE Product to Report.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] CVE Product to Report
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	vul-cveproducttoreport
Input Entities	intel471.cveproduct
Output Entities	Phrase
Short Description	CVE Product to Report.

[Intel 471] CVE Ref to Topic

Description

CVE Reference to Topic Thread.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] CVE Ref to Topic
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	vul-cvereftotopic
Input Entities	intel471.titanurl
Output Entities	Phrase
Short Description	CVE Reference to Topic Thread.

[Intel 471] CVE Report Status to CVE

Description

CVE Report Status to CVE.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] CVE Report Status to CVE
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	vul-cvereportstatustocve
Input Entities	intel471.CVEReportStatus
Output Entities	Phrase
Short Description	CVE Report Status to CVE.

[Intel 471] CVE Patch Status to CVE

Description

CVE Patch Status to CVE.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] CVE Patch Status to CVE
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	vul-cvestatustocve
Input Entities	intel471.cvepatchstatus
Output Entities	Phrase
Short Description	CVE Patch Status to CVE.

[Intel 471] CVE to GIR

Description

CVE to GIR requirements to allow pivoting.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] CVE to GIR
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	vul-cvetogir
Input Entities	intel471.cve
Output Entities	Phrase
Short Description	CVE to GIR requirements to allow pivoting.

[Intel 471] CVE to Maltego CVE

Description

Converts an Intel 471 CVE entity to a Maltego CVE entity.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] CVE to Maltego CVE
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	vul-cvetomaltegocve
Input Entities	intel471.cve
Output Entities	Phrase
Short Description	Converts an Intel 471 CVE entity to a Maltego CVE entity.

[Intel 471] CVE to Post Ref

Description

CVE to Reference Threads in the underground from CVE Report.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] CVE to Post Ref
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	vul-cvetopostref
Input Entities	intel471.cve
Output Entities	Phrase
Short Description	CVE to Reference Threads in the underground from CVE Report.

[Intel 471] CVE to Product

Description

CVE to Product.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] CVE to Product
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	vul-cvetoproduct
Input Entities	intel471.cve
Output Entities	Phrase
Short Description	CVE to Product.

[Intel 471] CVE to Report

Description

CVE to Report not Vulnerability.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] CVE to Report
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	vul-cvetoreport
Input Entities	intel471.cve
Output Entities	Phrase
Short Description	CVE to Report not Vulnerability.

[Intel 471] CVE to Report Status

Description

CVE to Report Status.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] CVE to Report Status
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	vul-cvetoreportstatus
Input Entities	intel471.cve
Output Entities	Phrase
Short Description	CVE to Report Status.

[Intel 471] CVE to Patch Status

Description

CVE to Patch Status.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] CVE to Patch Status
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	vul-cvetostatus
Input Entities	intel471.cve
Output Entities	Phrase
Short Description	CVE to Patch Status.

[Intel 471] CVE to Vendor

Description

CVE to Vendor.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] CVE to Vendor
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	vul-cvetovendor
Input Entities	intel471.cve
Output Entities	Phrase
Short Description	CVE to Vendor.

[Intel 471] CVE Vendor to Report

Description

CVE Vendor to Report.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] CVE Vendor to Report
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	vul-cvevendortoreport
Input Entities	intel471.cvevendor
Output Entities	Phrase
Short Description	CVE Vendor to Report.

[Intel 471] GIR to CVE

Description

Converts a GIR Path to CVE.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] GIR to CVE
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	vul-girtocve
Input Entities	intel471.girpath
Output Entities	Phrase
Short Description	Converts a GIR Path to CVE.

[Intel 471] Phrase to CVE

Description

Takes a Phrase and searches across CVE Reports.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Phrase to CVE
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	vul-phrasetocve
Input Entities	maltego.Phrase
Output Entities	Phrase
Short Description	Takes a Phrase and searches across CVE Reports.

[Intel 471] ProductToCVE

Description

Product to CVE.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] ProductToCVE
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	vul-producttocve
Input Entities	intel471.cveproduct
Output Entities	Phrase
Short Description	Product to CVE.

[Intel 471] Vendor to CVE

Description

Vendor to CVE.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Vendor to CVE
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	vul-vendortocve
Input Entities	intel471.cvevendor
Output Entities	Phrase
Short Description	Vendor to CVE.

[Intel 471] Actor to Alias

Description

Takes an Actor tied to a Forum and makes it generic for wider searching.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Actor to Alias
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-actortoalias
Input Entities	intel471.actor
Output Entities	Phrase
Short Description	Takes an Actor tied to a Forum and makes it generic for wider searching.

[Intel 471] Actor to Contact Info

Description

Takes an Actor and extracts Contact Information.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Actor to Contact Info
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-actortocontactinfo
Input Entities	intel471.actor
Output Entities	Phrase
Short Description	Takes an Actor and extracts Contact Information.

[Intel 471] Actor to Entity Link

Description

Actor to Entity Link.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Actor to Entity Link
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-actortoentitylink
Input Entities	intel471.actor
Output Entities	Phrase
Short Description	Actor to Entity Link.

[Intel 471] Actor to Forum

Description

Takes an Actor entity and extracts the Forum into a Website entity.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Actor to Forum
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-actortoforum
Input Entities	intel471.actor
Output Entities	Phrase
Short Description	Takes an Actor entity and extracts the Forum into a Website entity.

[Intel 471] Actor to Instant Message

Description

Takes an Actor and searches for Instant Messages.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Message Limit	int	2000	true	false	false
Result filter	string		true	false	false
Search Query	string		true	true	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Actor to Instant Message
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-actortoinstantmessage
Input Entities	intel471.instantmessageactor
Output Entities	Phrase
Short Description	Takes an Actor and searches for Instant Messages.

[Intel 471] Actor to Private Message

Description

Takes an Actor and searches for Private Messages.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Message Limit	int	2000	true	false	false
Result filter	string		true	false	false
Search Query	string		true	true	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Actor to Private Message
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-actortoprivatemessage
Input Entities	intel471.actor
Output Entities	Phrase
Short Description	Takes an Actor and searches for Private Messages.

[Intel 471] Actor to Thread

Description

Searches the Forum for Threads where the Actor has posted.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Search Query	string		true	true	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Actor to Thread
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-actortothread
Input Entities	intel471.actor
Output Entities	Phrase
Short Description	Searches the Forum for Threads where the Actor has posted.

[Intel 471] Alias to Actor

Description

Takes an Alias and converts it to an Actor or Report entity.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Alias to Actor
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-aliastoactor
Input Entities	maltego.Alias
Output Entities	Phrase
Short Description	Takes an Alias and converts it to an Actor or Report entity.

[Intel 471] Alias to Post

Description

Searches an Alias across all Posts.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Message Limit	int	2000	true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Alias to Post
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-aliastopost
Input Entities	maltego.Alias
Output Entities	Phrase
Short Description	Searches an Alias across all Posts.

[Intel 471] Bitcoin Address to Entity

Description

Bitcoin Address to Entity search.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Bitcoin Address to Entity
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-btcaddresstoentity
Input Entities	maltego.BTCAddress
Output Entities	Phrase
Short Description	Bitcoin Address to Entity search.

[Intel 471] Bitcoin to Post

Description

Searches Threads looking for Bitcoin Addresses.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Message Limit	int	2000	true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Bitcoin to Post
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-bitcointopost
Input Entities	maltego.BTCAddress
Output Entities	Phrase
Short Description	Searches Threads looking for Bitcoin Addresses.

[Intel 471] Crypto Currency to Post

Description

Searches Threads looking for a Crypto Currency entity for re-mining.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Message Limit	int	2000	true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Crypto Currency to Post
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-cryptocurrencytopost
Input Entities	intel471.cryptocurrency
Output Entities	Phrase
Short Description	Searches Threads looking for a Crypto Currency entity for re-mining.

[Intel 471] Domain to Entity

Description

Domain to Entity search.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Domain to Entity
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-domaintoentity
Input Entities	maltego.Domain
Output Entities	Phrase
Short Description	Domain to Entity search.

[Intel 471] Email to Entity

Description

Email Address to Entity search.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Email to Entity
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-emailtoentity
Input Entities	maltego.EmailAddress
Output Entities	Phrase
Short Description	Email Address to Entity search.

[Intel 471] Entity to Actor Link

Description

Converts an Entity to an Actor Link.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Entity to Actor Link
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-entitytoactorlink
Input Entities	intel471.Entity
Output Entities	Phrase
Short Description	Converts an Entity to an Actor Link.

[Intel 471] Entity to Alias

Description

Converts an Entity to an Alias.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Entity to Alias
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-entitytoalias
Input Entities	intel471.Entity
Output Entities	Phrase
Short Description	Converts an Entity to an Alias.

[Intel 471] IM Channel Actor to Alias

Description

Converts an Instant Message Channel Actor to an Alias.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] IM Channel Actor to Alias
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-imchannelactortoalias
Input Entities	intel471.imchannelactor
Output Entities	Phrase
Short Description	Converts an Instant Message Channel Actor to an Alias.

[Intel 471] IM Channel Actor to Instant Message

Description

Takes an Instant Message Channel Actor and searches for Instant Messages.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Message Limit	int	2000	true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] IM Channel Actor to Instant Message
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-imchannelactortoinstantmessage
Input Entities	intel471.imchannelactor
Output Entities	Phrase
Short Description	Takes an Instant Message Channel Actor and searches for Instant Messages.

[Intel 471] IM Channel to Instant Message

Description

Takes an Instant Message Channel and searches for Instant Messages.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Message Limit	int	2000	true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] IM Channel to Instant Message
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-imchanneltoinstantmessage
Input Entities	intel471.IMChannel
Output Entities	Phrase
Short Description	Takes an Instant Message Channel and searches for Instant Messages.

[Intel 471] Instant Message Entity Extract

Description

Extracts Entities from an Instant Message.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Instant Message Entity Extract
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-imentityextract
Input Entities	intel471.instantmessage
Output Entities	Phrase
Short Description	Extracts Entities from an Instant Message.

[Intel 471] IM Server Actor to Alias

Description

Converts an Instant Message Server Actor to an Alias.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] IM Server Actor to Alias
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-imserveractortoalias
Input Entities	intel471.instantmessageactor
Output Entities	Phrase
Short Description	Converts an Instant Message Server Actor to an Alias.

[Intel 471] IM Server to Instant Message

Description

Takes an Instant Message Server and searches for Instant Messages.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Message Limit	int	2000	true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] IM Server to Instant Message
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-imservertoinstantmessage
Input Entities	intel471.IMServer
Output Entities	Phrase
Short Description	Takes an Instant Message Server and searches for Instant Messages.

[Intel 471] IM to Channel

Description

Converts an Instant Message to a Channel.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] IM to Channel
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-imtochannel
Input Entities	intel471.instantmessage
Output Entities	Phrase
Short Description	Converts an Instant Message to a Channel.

[Intel 471] Instant Message to Instant Message Channel Actor

Description

Extracts the Actor from the specific Instant Message Channel.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Instant Message to Instant Message Channel Actor
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-imtoimchannelactor
Input Entities	intel471.instantmessage
Output Entities	Phrase
Short Description	Extracts the Actor from the specific Instant Message Channel.

[Intel 471] Instant Message to Instant Message Context

Description

Extracts the Context surrounding the Instant Message.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Regex	string		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Instant Message to Instant Message Context
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-imtoimcontext
Input Entities	intel471.instantmessage
Output Entities	Phrase
Short Description	Extracts the Context surrounding the Instant Message.

[Intel 471] Instant Message to Instant Message Server Actor

Description

Instant Message Actor raised from Channel to Server level.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Instant Message to Instant Message Server Actor
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-imtoimserveractor
Input Entities	intel471.instantmessage
Output Entities	Phrase
Short Description	Instant Message Actor raised from Channel to Server level.

[Intel 471] IM to Server

Description

Converts an Instant Message to a Server (or a Service if no Server is available).

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] IM to Server
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-imtoserver
Input Entities	intel471.instantmessage
Output Entities	Phrase
Short Description	Converts an Instant Message to a Server (or a Service if no Server is available).

[Intel 471] IP Address to Entity

Description

IP Address to Entity search.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] IP Address to Entity
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-iptoentity
Input Entities	maltego.IPv4Address
Output Entities	Phrase
Short Description	IP Address to Entity search.

[Intel 471] Message to Thread

Description

Takes a Message entity and converts it back to its Thread.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Message to Thread
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-messagetothread
Input Entities	intel471.post
Output Entities	Phrase
Short Description	Takes a Message entity and converts it back to its Thread.

[Intel 471] Private Message Entity Extract

Description

Extracts Entities from a Private Message.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Private Message Entity Extract
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-pmentityextract
Input Entities	intel471.privatemessage
Output Entities	Phrase
Short Description	Extracts Entities from a Private Message.

[Intel 471] Private Message to Receiver

Description

Extracts the Receiver from the Private Message.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Private Message to Receiver
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-pmtoreceiver
Input Entities	intel471.privatemessage
Output Entities	Phrase
Short Description	Extracts the Receiver from the Private Message.

[Intel 471] Private Message to Sender

Description

Extracts the Sender from the Private Message

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Private Message to Sender
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-pmtosender
Input Entities	intel471.privatemessage
Output Entities	Phrase
Short Description	Extracts the Sender from the Private Message

[Intel 471] Phrase to Entity

Description

Phrase to Entity search.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Phrase to Entity
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-phrasetoentity
Input Entities	maltego.Phrase
Output Entities	Phrase
Short Description	Phrase to Entity search.

[Intel 471] Phrase to Instant Message

Description

Searches Instant Messages for the Phrase.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Message Limit	int	2000	true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Phrase to Instant Message
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-phrasetoinstantmessage
Input Entities	maltego.Phrase
Output Entities	Phrase
Short Description	Searches Instant Messages for the Phrase.

[Intel 471] Phrase to Post

Description

Searches Posts for the Phrase.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Message Limit	int	2000	true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Phrase to Post
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-phrasetopost
Input Entities	maltego.Phrase
Output Entities	Phrase
Short Description	Searches Posts for the Phrase.

[Intel 471] Phrase to Private Message

Description

Searches Private Messages for the Phrase.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Message Limit	int	2000	true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Phrase to Private Message
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-phrasetoprivatemessage
Input Entities	maltego.Phrase
Output Entities	Phrase
Short Description	Searches Private Messages for the Phrase.

[Intel 471] Post Entity Extract

Description

Extracts Entities from a Post.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Post Entity Extract
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-postentityextract
Input Entities	intel471.post
Output Entities	Phrase
Short Description	Extracts Entities from a Post.

[Intel 471] Post to Alias

Description

Converts a Post back to its Alias based on the Post Author

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Post to Alias
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-posttoalias
Input Entities	intel471.post
Output Entities	Phrase
Short Description	Converts a Post back to its Alias based on the Post Author

[Intel 471] Post to Date

Description

Translates a Message or Post to a date.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Post to Date
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-posttodate
Input Entities	intel471.post
Output Entities	Phrase
Short Description	Translates a Message or Post to a date.

[Intel 471] Post to Forum Member

Description

Takes a Post and converts to a Forum Member.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Post to Forum Member
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-posttoforummember
Input Entities	intel471.post
Output Entities	Phrase
Short Description	Takes a Post and converts to a Forum Member.

[Intel 471] Thread to Actor

Description

Takes a Thread and converts to all Actors posting on that Thread.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Thread to Actor
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-threadtoactor
Input Entities	intel471.thread
Output Entities	Phrase
Short Description	Takes a Thread and converts to all Actors posting on that Thread.

[Intel 471] Thread to Actor Post

Description

Adjust the property field to allow for extraction of Posts linked to actor_handle.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Actor Handle	string		true	true	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Message Limit	int	2000	true	false	false
Result filter	string		true	false	false
Search Query	string		true	true	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Thread to Actor Post
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-threadtoactorpost
Input Entities	intel471.thread
Output Entities	Phrase
Short Description	Adjust the property field to allow for extraction of Posts linked to actor_handle.

[Intel 471] Thread to Author

Description

Extracts the Author direct from the Topic.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Thread to Author
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-threadtoauthor
Input Entities	intel471.thread
Output Entities	Phrase
Short Description	Extracts the Author direct from the Topic.

[Intel 471] Thread to Forum

Description

Converts a Thread back into its parent Forum.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Thread to Forum
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-threadtoforum
Input Entities	intel471.thread
Output Entities	Phrase
Short Description	Converts a Thread back into its parent Forum.

[Intel 471] Thread to Possible Associates

Description

Determines collisions between Threat Actors on Threads.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Regex	string		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Thread to Possible Associates
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-threadtopossibleassociates
Input Entities	intel471.post
Output Entities	Phrase
Short Description	Determines collisions between Threat Actors on Threads.

[Intel 471] Thread to Similar Topic

Description

Takes a Thread and searches across Similar Topics.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Thread to Similar Topic
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	adv-threadtosimilartopic
Input Entities	intel471.thread
Output Entities	Phrase
Short Description	Takes a Thread and searches across Similar Topics.

[Intel 471] Date Stripper

Description

Converts a date entity and strips away the day or month, depending on input.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Date Stripper
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	gen-datestripper
Input Entities	maltego.DateTime
Output Entities	Phrase
Short Description	Converts a date entity and strips away the day or month, depending on input.

[Intel 471] Domain to Post

Description

Takes a Domain and searches across Posts.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Message Limit	int	2000	true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Domain to Post
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	gen-domaintopost
Input Entities	maltego.Domain
Output Entities	Phrase
Short Description	Takes a Domain and searches across Posts.

[Intel 471] Email to Post

Description

Takes an Email Address and searches across Posts.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Message Limit	int	2000	true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Email to Post
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	gen-emailtopost
Input Entities	maltego.EmailAddress
Output Entities	Phrase
Short Description	Takes an Email Address and searches across Posts.

[Intel 471] File to Post

Description

Takes a File and searches across Posts.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Message Limit	int	2000	true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] File to Post
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	gen-filetopost
Input Entities	maltego.File
Output Entities	Phrase
Short Description	Takes a File and searches across Posts.

[Intel 471] IP to Post

Description

Takes an IP Address and searches across Posts.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Message Limit	int	2000	true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] IP to Post
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	gen-iptopost
Input Entities	maltego.IPv4Address
Output Entities	Phrase
Short Description	Takes an IP Address and searches across Posts.

[Intel 471] URL to Post

Description

Takes a URL and searches across Posts.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Message Limit	int	2000	true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] URL to Post
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	gen-urltopost
Input Entities	maltego.URL
Output Entities	Phrase
Short Description	Takes a URL and searches across Posts.

[Intel 471] Website to Actor

Description

Take a Website and searches for Actors on that Website.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Website to Actor
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	gen-websitetoactor
Input Entities	maltego.Website
Output Entities	Phrase
Short Description	Take a Website and searches for Actors on that Website.

[Intel 471] Website to Post

Description

Take a Website and searches across Posts.

Transform Settings

Display Name	Setting Type	Default Value	Optional	Popup	Authentication
API Key	string		true	false	false
Date Range	daterange		true	false	false
Email Address	string		true	false	false
Message Limit	int	2000	true	false	false
Result filter	string		true	false	false
Show Entity For Empty Results	boolean	true	true	false	false
Show RAG Bookmarks based on entity’s age	boolean	true	true	false	false
Show the date inside entity’s caption	boolean	true	true	false	false
Show the date on entity’s link line	boolean	false	true	false	false

Transform Meta Info

Information	Value
Display Name	[Intel 471] Website to Post
Owner	Intel 471 Inc.
Author	maltegotransforms@intel471.com
Data Source	Intel 471
Transform Name	gen-websitetopost
Input Entities	maltego.Website
Output Entities	Phrase
Short Description	Take a Website and searches across Posts.