Open navigation

Intel 471 Enterprise

Modified on: Wed, 28 Aug, 2024 at 4:01 PM

Overview

Intel 471 provides in-depth and globally relevant coverage and tracking of sophisticated, financially motivated cybercriminals, hacktivists and other threats targeting organizations, their customers, employees, and suppliers. The Intel 471 Transforms in Maltego supports cyber security teams, law enforcement agencies, Trust & Safety investigators, and researchers in querying and mapping deep and dark web data and threat intelligence in a visualized graph.


Intel 471 is active in places where entry is highly guarded such as underground marketplaces and chat rooms.


With the Intel 471 data integration in Maltego, investigators can gain insights in various cybersecurity disciplines such as deep and dark web investigations, brand protection, due diligence, fraud, insider threat, vulnerability management, and more.


The Intel 471 data Subscriptions for Maltego cover Intel 471 Deep & Dark Web Collections, which is a collection of deep and dark web data acquired from underground forums, marketplaces, and chat rooms such as Telegram, Discord, IRC, ICQ, and others.


With Intel 471 data subscriptions, investigators can obtain near real-time visibility into key actors, assets, issues, organizations, and other criminal entities, as well as evidence from within the cyber underground—all via a flexible, annual subscription that is tailored to individual project needs and budgets.


Each data subscription allows a fixed number of Transform runs per month.


Be sure to visit our blog for further insights. For a brief introduction to the updated Intel 471 Maltego Transforms and the Intel 471 data subscriptions read Enrich Threat Intelligence and Criminal Investigations with Intel 471 Transforms and Data Subscriptions.


For an interesting overview of how the Intel471 Transforms for Maltego enables investigators and organizations to proactively measure security threats and link risk data, read about the Intel 471 Solution in Maltego.


You can read more about the Intel 471 Transforms for Maltego on our website here.


Updates and Changelog

Intel471 Enterprise Transforms Update: 06 July 2022.


New Transforms and Transform Properties

We have introduced new Transforms and extraction capabilities to cater to Breach Alerts, Malware Reports, and Credentials Intelligence.


Through the provision of new Transform properties, we have provided users with the capability to show dates on Entity link lines instead of within the caption of the Entity itself. Additionally, we have added the capability to turn off the Intel 471 No Entity icon to help reduce noise in large graphs.


We have also provided the ability to turn off the RAGB (Red, Amber, Green, and Blue) bookmarking to support alternative bookmark use cases and have introduced a second layer of filtering for returned results that uses regex to allow for more advanced use cases.


Updates

Minor updates have been made to naming conventions for some Transforms and de-duplication of properties for some Entities.


New Transforms:

  • GIR to Malware Report
  • GIR to Credentialset
  • GIR to Breachalert
  • Malware Family to Malware Report
  • Malware Report to Alias
  • Malware Report to GIR
  • Malware Report to Malware Family
  • Credentialset to Date
  • Credentialset to GIR
  • Credentialset to Titanurl
  • Credentialset to Victim
  • Domain to Credentialset
  • Phrase to Credentialset
  • Phrase to Malware Report
  • Phrase to Breachalert
  • Website to Breachalert


Re-named Transforms

  • "MessageToTopic" re-named to "MessageToThread"


Additionally all Transforms and respective URLs have been re-named so that they match the pattern used by the library's registry.


This means that the "dot" (.) has been replaced with the "dash" (-) within the name, and the prefix was added to each URL, for example:


Changed Output Entity Types

Output Entity changed from intel471.URL into maltego.URL for the following Transforms:

  • URL to Post
  • URL to Report
  • URL to Malware Event


New Transform Settings

  • -entity_date - Toggle showing the date inside Entity's caption
  • -link_date - Toggle showing the date on Entity's link line
  • -no_results_entity - Toggle showing an Entity representing empty results
  • -rag_bookmarks - Toggle showing RAG Bookmarks based on Entity's age
  • -result_filter - Additionally filter results returned by the API



Intel 471 Transforms

[Intel 471] Actor to Report

Description

Tries to identify Reports for a specific Actor/Forum combination.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Actor to Report
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-actortoreport
Input Entitiesintel471.actor
Output EntitiesPhrase
Short DescriptionTries to identify Reports for a specific Actor/Forum combination.

[Intel 471] Alias to Report

Description

Takes an Alias and converts it to a Report type.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Alias to Report
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-aliastoreport
Input Entitiesmaltego.Alias
Output EntitiesPhrase
Short DescriptionTakes an Alias and converts it to a Report type.

[Intel 471] Thread to Titan URL

Description

Extracts the Titan URL from the Forum Thread.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Thread to Titan URL
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-threadtotitanurl
Input Entitiesintel471.thread
Output EntitiesPhrase
Short DescriptionExtracts the Titan URL from the Forum Thread.

[Intel 471] Credential Set to Date

Description

Translates Credential Set to a date.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Credential Set to Date
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namecrd-credentialsettodate
Input Entitiesintel471.credentialset
Output EntitiesPhrase
Short DescriptionTranslates Credential Set to a date.

[Intel 471] Event to GIR

Description

Malware Event to GIR.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Event to GIR
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namemal-eventtogir
Input Entitiesintel471.malwareevent
Output EntitiesPhrase
Short DescriptionMalware Event to GIR.

[Intel 471] Credential Set to GIR

Description

Takes a Credential Set and extracts GIR info


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Credential Set to GIR
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namecrd-credentialsettogir
Input Entitiesintel471.credentialset
Output EntitiesPhrase
Short DescriptionTakes a Credential Set and extracts GIR info

[Intel 471] Credential Set to Titan URL

Description

Extracts the Titan URL from the Credential Set.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Credential Set to Titan URL
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namecrd-credentialsettotitanurl
Input Entitiesintel471.credentialset
Output EntitiesPhrase
Short DescriptionExtracts the Titan URL from the Credential Set.

[Intel 471] Credential Set to Victim

Description

Takes a Credential Set and extracts victims’ org names and URLs.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Credential Set to Victim
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namecrd-credentialsettovictim
Input Entitiesintel471.credentialset
Output EntitiesPhrase
Short DescriptionTakes a Credential Set and extracts victims’ org names and URLs.

[Intel 471] Phrase to Credential Set

Description

Takes a Phrase and searches across Credential Sets.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Phrase to Credential Set
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namecrd-phrasetocredentialset
Input Entitiesmaltego.Phrase
Output EntitiesPhrase
Short DescriptionTakes a Phrase and searches across Credential Sets.

[Intel 471] Domain to Credential Set

Description

Takes a Domain and searches across Credential Sets.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Domain to Credential Set
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namecrd-domaintocredentialset
Input Entitiesmaltego.Domain
Output EntitiesPhrase
Short DescriptionTakes a Domain and searches across Credential Sets.

[Intel 471] GIR Path to Credential Set

Description

Takes GIR Path and searches across Credential Sets.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] GIR Path to Credential Set
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namecrd-girpathtocredentialset
Input Entitiesintel471.girpath
Output EntitiesPhrase
Short DescriptionTakes GIR Path and searches across Credential Sets.

[Intel 471] Domain to Report

Description

Takes a Domain and searches across Reports.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Domain to Report
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namegen-domaintoreport
Input Entitiesmaltego.Domain
Output EntitiesPhrase
Short DescriptionTakes a Domain and searches across Reports.

[Intel 471] Email to Report

Description

Takes an Email Address and searches across Reports.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Email to Report
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namegen-emailtoreport
Input Entitiesmaltego.EmailAddress
Output EntitiesPhrase
Short DescriptionTakes an Email Address and searches across Reports.

[Intel 471] File to Report

Description

Takes a File and searches across Reports.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] File to Report
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namegen-filetoreport
Input Entitiesmaltego.File
Output EntitiesPhrase
Short DescriptionTakes a File and searches across Reports.

[Intel 471] IP Address to Report

Description

Takes an IP Address and searches across Reports.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] IP Address to Report
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namegen-ipaddresstoreport
Input Entitiesmaltego.IPv4Address
Output EntitiesPhrase
Short DescriptionTakes an IP Address and searches across Reports.

[Intel 471] IP to IOC

Description

Takes an IP Address and searches across IOCs.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] IP to IOC
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namegen-iptoioc
Input Entitiesmaltego.IPv4Address
Output EntitiesPhrase
Short DescriptionTakes an IP Address and searches across IOCs.

[Intel 471] Phrase to IOC

Description

Takes a Phrase and searches across IOCs.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Phrase to IOC
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namegen-phrasetoioc
Input Entitiesmaltego.Phrase
Output EntitiesPhrase
Short DescriptionTakes a Phrase and searches across IOCs.

[Intel 471] Phrase to Report

Description

Takes a Phrase and searches across Reports.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Phrase to Report
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namegen-phrasetoreport
Input Entitiesmaltego.Phrase
Output EntitiesPhrase
Short DescriptionTakes a Phrase and searches across Reports.

[Intel 471] URL to Report

Description

Takes a URL and searches across Reports.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] URL to Report
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namegen-urltoreport
Input Entitiesmaltego.URL
Output EntitiesPhrase
Short DescriptionTakes a URL and searches across Reports.

[Intel 471] Website to IOC

Description

Takes a Website and searches for IOCs.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Website to IOC
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namegen-websitetoioc
Input Entitiesmaltego.Website
Output EntitiesPhrase
Short DescriptionTakes a Website and searches for IOCs.

[Intel 471] Website to Information Report

Description

Takes a Website and searches across Reports.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Website to Information Report
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namegen-websitetoreport
Input Entitiesmaltego.Website
Output EntitiesPhrase
Short DescriptionTakes a Website and searches across Reports.

[Intel 471] Botnet Name to Alias

Description

Converts a Botnet name to an Alias.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Botnet Name to Alias
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namemal-botnetnametoalias
Input Entitiesintel471.malwareeventsettings
Output EntitiesPhrase
Short DescriptionConverts a Botnet name to an Alias.

[Intel 471] Botnet Setting to Key

Description

Extracts Keys from Botnet settings.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Botnet Setting to Key
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namemal-botnetsettingtokey
Input Entitiesintel471.malwareeventsettings
Output EntitiesPhrase
Short DescriptionExtracts Keys from Botnet settings.

[Intel 471] Domain to Malware Event

Description

Takes a Domain and searches across Malware Events.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Domain to Malware Event
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namemal-domaintomalwareevent
Input Entitiesmaltego.Domain
Output EntitiesPhrase
Short DescriptionTakes a Domain and searches across Malware Events.

[Intel 471] Event to Controller

Description

Event to Controller: Obtains Controller details.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Event to Controller
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namemal-eventtocontroller
Input Entitiesintel471.malwareevent
Output EntitiesPhrase
Short DescriptionEvent to Controller: Obtains Controller details.

[Intel 471] Event to Event Type

Description

Event to Event Type: Based on our extraction.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Event to Event Type
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namemal-eventtoeventtype
Input Entitiesintel471.malwareevent
Output EntitiesPhrase
Short DescriptionEvent to Event Type: Based on our extraction.

[Intel 471] Event to File

Description

Extracts MD5, SHA1 and SHA256 hashes from Events.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Event to File
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namemal-eventtohash
Input Entitiesintel471.malwareevent
Output EntitiesPhrase
Short DescriptionExtracts MD5, SHA1 and SHA256 hashes from Events.

[Intel 471] Event to Malware Family

Description

Converts an Event to a Malware Family.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Event to Malware Family
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namemal-eventtomalwarefamily
Input Entitiesintel471.malwareevent
Output EntitiesPhrase
Short DescriptionConverts an Event to a Malware Family.

[Intel 471] Event to Mitre

Description

Event to Mitre Attack Framework where available.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Event to Mitre
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namemal-eventtomitre
Input Entitiesintel471.malwareevent
Output EntitiesPhrase
Short DescriptionEvent to Mitre Attack Framework where available.

[Intel 471] Event to Receiver

Description

Converts an Event to Spam Receivers.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Event to Receiver
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namemal-eventtoreceiver
Input Entitiesintel471.malwareevent
Output EntitiesPhrase
Short DescriptionConverts an Event to Spam Receivers.

[Intel 471] Event to Sender

Description

Converts an Event to Spam Sender.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Event to Sender
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namemal-eventtosender
Input Entitiesintel471.malwareevent
Output EntitiesPhrase
Short DescriptionConverts an Event to Spam Sender.

[Intel 471] Event to Settings

Description

Event to Settings configuration.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Event to Settings
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namemal-eventtosettings
Input Entitiesintel471.malwareevent
Output EntitiesPhrase
Short DescriptionEvent to Settings configuration.

[Intel 471] Event Type to Event

Description

Converts an Event Type to an Event.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Event Type to Event
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namemal-eventtypetoevent
Input Entitiesintel471.malwareeventtype
Output EntitiesPhrase
Short DescriptionConverts an Event Type to an Event.

[Intel 471] File to Malware Event

Description

Takes a File and searches across Malware Events.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] File to Malware Event
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namemal-filetomalwareevent
Input Entitiesmaltego.File
Output EntitiesPhrase
Short DescriptionTakes a File and searches across Malware Events.

[Intel 471] GIR to Malware Event

Description

GIR to Malware Events : Obtains Events based on GIR Path number.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] GIR to Malware Event
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namemal-girtomalwareevent
Input Entitiesintel471.girpath
Output EntitiesPhrase
Short DescriptionGIR to Malware Events : Obtains Events based on GIR Path number.

[Intel 471] Phrase to Malware Report

Description

Takes a Phrase and searches across Malware Reports.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Phrase to Malware Report
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namemal-phrasetomalwarereport
Input Entitiesmaltego.Phrase
Output EntitiesPhrase
Short DescriptionTakes a Phrase and searches across Malware Reports.

[Intel 471] GIR to Malware Report

Description

Takes a GIR path and searches related Malware Reports.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] GIR to Malware Report
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namemal-girtomalwarereport
Input Entitiesintel471.girpath
Output EntitiesPhrase
Short DescriptionTakes a GIR path and searches related Malware Reports.

[Intel 471] IP to Malware Event

Description

Takes an IP Address and searches across Malware Events.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] IP to Malware Event
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namemal-iptomalwareevent
Input Entitiesmaltego.IPv4Address
Output EntitiesPhrase
Short DescriptionTakes an IP Address and searches across Malware Events.

[Intel 471] Malware Family to Event

Description

Converts a Malware Family to an Event.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Malware Family to Event
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namemal-malwarefamilytoevent
Input Entitiesintel471.malwarefamily
Output EntitiesPhrase
Short DescriptionConverts a Malware Family to an Event.

[Intel 471] Malware Family to Malware Report

Description

Takes a Malware Family and searches across Malware Reports.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Malware Family to Malware Report
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namemal-malwarefamilytomalwarereport
Input Entitiesintel471.malwarefamily
Output EntitiesPhrase
Short DescriptionTakes a Malware Family and searches across Malware Reports.

[Intel 471] Malware Report to Alias

Description

Takes a Malware Report and extracts adversaries.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Malware Report to Alias
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namemal-malwarereporttoalias
Input Entitiesintel471.malwarereport
Output EntitiesPhrase
Short DescriptionTakes a Malware Report and extracts adversaries.

[Intel 471] Malware Report to GIR Path

Description

Takes a Malware Report and extracts the GIR Paths.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Malware Report to GIR Path
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namemal-malwarereporttogir
Input Entitiesintel471.malwarereport
Output EntitiesPhrase
Short DescriptionTakes a Malware Report and extracts the GIR Paths.

[Intel 471] Malware Report to Malware Family

Description

Converts a Malware Report to a Malware Family.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Malware Report to Malware Family
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namemal-malwarereporttomalwarefamily
Input Entitiesintel471.malwarereport
Output EntitiesPhrase
Short DescriptionConverts a Malware Report to a Malware Family.

[Intel 471] Phrase to Malware Event

Description

Takes a Phrase and searches across Malware Events.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Phrase to Malware Event
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namemal-phrasetomalwareevent
Input Entitiesmaltego.Phrase
Output EntitiesPhrase
Short DescriptionTakes a Phrase and searches across Malware Events.

[Intel 471] URL to Malware Event

Description

Takes a URL and searches across Malware Events.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] URL to Malware Event
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namemal-urltomalwareevent
Input Entitiesmaltego.URL
Output EntitiesPhrase
Short DescriptionTakes a URL and searches across Malware Events.

[Intel 471] Breach Alert to Alias

Description

Takes a Breach Alert and converts it to an Alias entity.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Breach Alert to Alias
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namerep-breachalerttoalias
Input Entitiesintel471.breachalert
Output EntitiesPhrase
Short DescriptionTakes a Breach Alert and converts it to an Alias entity.

[Intel 471] Breach Alert to Victim

Description

Takes a Breach Alert and extracts victims’ org names and URLs.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Breach Alert to Victim
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namerep-breachalerttovictim
Input Entitiesintel471.breachalert
Output EntitiesPhrase
Short DescriptionTakes a Breach Alert and extracts victims’ org names and URLs.

[Intel 471] Phrase to Breach Alert

Description

Takes a Phrase and searches across Breach Alerts.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Phrase to Breach Alert
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namerep-phrasetobreachalert
Input Entitiesmaltego.Phrase
Output EntitiesPhrase
Short DescriptionTakes a Phrase and searches across Breach Alerts.

[Intel 471] Domain to Breach Alert

Description

Takes a Domain and searches across Breach Alerts.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Domain to Breach Alert
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namerep-domaintobreachalert
Input Entitiesmaltego.Domain
Output EntitiesPhrase
Short DescriptionTakes a Domain and searches across Breach Alerts.

[Intel 471] Domain to IOC

Description

Takes a Domain translates to an IOC report.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Domain to IOC
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namerep-domaintoioc
Input Entitiesmaltego.Domain
Output EntitiesPhrase
Short DescriptionTakes a Domain translates to an IOC report.

[Intel 471] GIR Name to Report

Description

GIR Name to Report based on GIR Path.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] GIR Name to Report
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namerep-girnametoreport
Input Entitiesintel471.girpath
Output EntitiesPhrase
Short DescriptionGIR Name to Report based on GIR Path.

[Intel 471] GIR Path to Report

Description

GIR Path to Report based on GIR Path.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] GIR Path to Report
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namerep-girpathtoreport
Input Entitiesintel471.girpath
Output EntitiesPhrase
Short DescriptionGIR Path to Report based on GIR Path.

[Intel 471] GIR to Breach Alert

Description

Takes a GIR and searches related Breach Alerts.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] GIR to Breach Alert
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namerep-girtobreachalert
Input Entitiesintel471.girpath
Output EntitiesPhrase
Short DescriptionTakes a GIR and searches related Breach Alerts.

[Intel 471] GIR to Name

Description

Takes a GIR value and converts to GIR Path Name.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] GIR to Name
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namerep-girtoname
Input Entitiesintel471.girpath
Output EntitiesPhrase
Short DescriptionTakes a GIR value and converts to GIR Path Name.

[Intel 471] IOC Converter

Description

Takes an IOC and converts it into a Domain, IP Address or URL.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] IOC Converter
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namerep-iocconverter
Input Entitiesintel471.maliciousioc
Output EntitiesPhrase
Short DescriptionTakes an IOC and converts it into a Domain, IP Address or URL.

[Intel 471] Phrase to Spot Report

Description

Takes a Phrase and searches across Spot Reports.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Phrase to Spot Report
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namerep-phrasetospot
Input Entitiesmaltego.Phrase
Output EntitiesPhrase
Short DescriptionTakes a Phrase and searches across Spot Reports.

[Intel 471] Report Hash to Report

Description

Takes a Report Hash and generates its related Report.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Report Hash to Report
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namerep-reporthashtoreport
Input Entitiesintel471.reporthash
Output EntitiesPhrase
Short DescriptionTakes a Report Hash and generates its related Report.

[Intel 471] Report to Date

Description

Extracts the date from the Report.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Report to Date
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namerep-reporttodate
Input Entitiesintel471.report
Output EntitiesPhrase
Short DescriptionExtracts the date from the Report.

[Intel 471] Report to Entities

Description

Takes a Report and extracts its Entities.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Report to Entities
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namerep-reporttoentities
Input Entitiesintel471.report
Output EntitiesPhrase
Short DescriptionTakes a Report and extracts its Entities.

[Intel 471] Report to GIR Path

Description

Takes a Report and extracts the GIR Paths.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Report to GIR Path
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namerep-reporttogir
Input Entitiesintel471.report
Output EntitiesPhrase
Short DescriptionTakes a Report and extracts the GIR Paths.

[Intel 471] Report to Location

Description

Takes a Report and extracts location details.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Report to Location
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namerep-reporttolocation
Input Entitiesintel471.report
Output EntitiesPhrase
Short DescriptionTakes a Report and extracts location details.

Description

Takes a Report and generates its related reports via hash.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Report to Related
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namerep-reporttorelated
Input Entitiesintel471.report
Output EntitiesPhrase
Short DescriptionTakes a Report and generates its related reports via hash.

[Intel 471] Report to Report Subject

Description

Takes a Report and extracts the Report Subject.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Report to Report Subject
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namerep-reporttoreportsubject
Input Entitiesintel471.report
Output EntitiesPhrase
Short DescriptionTakes a Report and extracts the Report Subject.

[Intel 471] Report to Report Tags

Description

Takes a Report and extracts its Tags.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Report to Report Tags
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namerep-reporttoreporttags
Input Entitiesintel471.report
Output EntitiesPhrase
Short DescriptionTakes a Report and extracts its Tags.

[Intel 471] Report to Report Type

Description

Converts a Report to a Report Type.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Report to Report Type
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namerep-reporttoreporttype
Input Entitiesintel471.report
Output EntitiesPhrase
Short DescriptionConverts a Report to a Report Type.

[Intel 471] Report to Report URL

Description

Takes a Report and coverts it to its Titan URL.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Report to Report URL
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namerep-reporttoreporturl
Input Entitiesintel471.report
Output EntitiesPhrase
Short DescriptionTakes a Report and coverts it to its Titan URL.

[Intel 471] Spot Report Entity Extract

Description

Extracts a list of Domains from Spot Report text.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Spot Report Entity Extract
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namerep-spotentityextract
Input Entitiesintel471.report
Output EntitiesPhrase
Short DescriptionExtracts a list of Domains from Spot Report text.

[Intel 471] Tag to Report

Description

Takes a Tag and searches across Reports.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Tag to Report
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namerep-tagtoreport
Input Entitiesintel471.tag
Output EntitiesPhrase
Short DescriptionTakes a Tag and searches across Reports.

[Intel 471] Website to Breach Alert

Description

Takes a Website and searches across Breach Alerts.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Website to Breach Alert
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namerep-websitetobreachalert
Input Entitiesmaltego.Website
Output EntitiesPhrase
Short DescriptionTakes a Website and searches across Breach Alerts.

[Intel 471] CVE Product to Report

Description

CVE Product to Report.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] CVE Product to Report
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namevul-cveproducttoreport
Input Entitiesintel471.cveproduct
Output EntitiesPhrase
Short DescriptionCVE Product to Report.

[Intel 471] CVE Ref to Topic

Description

CVE Reference to Topic Thread.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] CVE Ref to Topic
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namevul-cvereftotopic
Input Entitiesintel471.titanurl
Output EntitiesPhrase
Short DescriptionCVE Reference to Topic Thread.

[Intel 471] CVE Report Status to CVE

Description

CVE Report Status to CVE.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] CVE Report Status to CVE
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namevul-cvereportstatustocve
Input Entitiesintel471.CVEReportStatus
Output EntitiesPhrase
Short DescriptionCVE Report Status to CVE.

[Intel 471] CVE Patch Status to CVE

Description

CVE Patch Status to CVE.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] CVE Patch Status to CVE
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namevul-cvestatustocve
Input Entitiesintel471.cvepatchstatus
Output EntitiesPhrase
Short DescriptionCVE Patch Status to CVE.

[Intel 471] CVE to GIR

Description

CVE to GIR requirements to allow pivoting.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] CVE to GIR
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namevul-cvetogir
Input Entitiesintel471.cve
Output EntitiesPhrase
Short DescriptionCVE to GIR requirements to allow pivoting.

[Intel 471] CVE to Maltego CVE

Description

Converts an Intel 471 CVE entity to a Maltego CVE entity.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] CVE to Maltego CVE
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namevul-cvetomaltegocve
Input Entitiesintel471.cve
Output EntitiesPhrase
Short DescriptionConverts an Intel 471 CVE entity to a Maltego CVE entity.

[Intel 471] CVE to Post Ref

Description

CVE to Reference Threads in the underground from CVE Report.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] CVE to Post Ref
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namevul-cvetopostref
Input Entitiesintel471.cve
Output EntitiesPhrase
Short DescriptionCVE to Reference Threads in the underground from CVE Report.

[Intel 471] CVE to Product

Description

CVE to Product.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] CVE to Product
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namevul-cvetoproduct
Input Entitiesintel471.cve
Output EntitiesPhrase
Short DescriptionCVE to Product.

[Intel 471] CVE to Report

Description

CVE to Report not Vulnerability.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] CVE to Report
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namevul-cvetoreport
Input Entitiesintel471.cve
Output EntitiesPhrase
Short DescriptionCVE to Report not Vulnerability.

[Intel 471] CVE to Report Status

Description

CVE to Report Status.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] CVE to Report Status
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namevul-cvetoreportstatus
Input Entitiesintel471.cve
Output EntitiesPhrase
Short DescriptionCVE to Report Status.

[Intel 471] CVE to Patch Status

Description

CVE to Patch Status.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] CVE to Patch Status
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namevul-cvetostatus
Input Entitiesintel471.cve
Output EntitiesPhrase
Short DescriptionCVE to Patch Status.

[Intel 471] CVE to Vendor

Description

CVE to Vendor.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] CVE to Vendor
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namevul-cvetovendor
Input Entitiesintel471.cve
Output EntitiesPhrase
Short DescriptionCVE to Vendor.

[Intel 471] CVE Vendor to Report

Description

CVE Vendor to Report.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] CVE Vendor to Report
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namevul-cvevendortoreport
Input Entitiesintel471.cvevendor
Output EntitiesPhrase
Short DescriptionCVE Vendor to Report.

[Intel 471] GIR to CVE

Description

Converts a GIR Path to CVE.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] GIR to CVE
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namevul-girtocve
Input Entitiesintel471.girpath
Output EntitiesPhrase
Short DescriptionConverts a GIR Path to CVE.

[Intel 471] Phrase to CVE

Description

Takes a Phrase and searches across CVE Reports.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Phrase to CVE
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namevul-phrasetocve
Input Entitiesmaltego.Phrase
Output EntitiesPhrase
Short DescriptionTakes a Phrase and searches across CVE Reports.

[Intel 471] ProductToCVE

Description

Product to CVE.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] ProductToCVE
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namevul-producttocve
Input Entitiesintel471.cveproduct
Output EntitiesPhrase
Short DescriptionProduct to CVE.

[Intel 471] Vendor to CVE

Description

Vendor to CVE.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Vendor to CVE
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namevul-vendortocve
Input Entitiesintel471.cvevendor
Output EntitiesPhrase
Short DescriptionVendor to CVE.

[Intel 471] Actor to Alias

Description

Takes an Actor tied to a Forum and makes it generic for wider searching.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Actor to Alias
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-actortoalias
Input Entitiesintel471.actor
Output EntitiesPhrase
Short DescriptionTakes an Actor tied to a Forum and makes it generic for wider searching.

[Intel 471] Actor to Contact Info

Description

Takes an Actor and extracts Contact Information.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Actor to Contact Info
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-actortocontactinfo
Input Entitiesintel471.actor
Output EntitiesPhrase
Short DescriptionTakes an Actor and extracts Contact Information.

Description

Actor to Entity Link.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Actor to Entity Link
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-actortoentitylink
Input Entitiesintel471.actor
Output EntitiesPhrase
Short DescriptionActor to Entity Link.

[Intel 471] Actor to Forum

Description

Takes an Actor entity and extracts the Forum into a Website entity.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Actor to Forum
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-actortoforum
Input Entitiesintel471.actor
Output EntitiesPhrase
Short DescriptionTakes an Actor entity and extracts the Forum into a Website entity.

[Intel 471] Actor to Instant Message

Description

Takes an Actor and searches for Instant Messages.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Message Limitint2000truefalsefalse
Result filterstring truefalsefalse
Search Querystring truetruefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Actor to Instant Message
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-actortoinstantmessage
Input Entitiesintel471.instantmessageactor
Output EntitiesPhrase
Short DescriptionTakes an Actor and searches for Instant Messages.

[Intel 471] Actor to Private Message

Description

Takes an Actor and searches for Private Messages.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Message Limitint2000truefalsefalse
Result filterstring truefalsefalse
Search Querystring truetruefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Actor to Private Message
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-actortoprivatemessage
Input Entitiesintel471.actor
Output EntitiesPhrase
Short DescriptionTakes an Actor and searches for Private Messages.

[Intel 471] Actor to Thread

Description

Searches the Forum for Threads where the Actor has posted.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Search Querystring truetruefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Actor to Thread
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-actortothread
Input Entitiesintel471.actor
Output EntitiesPhrase
Short DescriptionSearches the Forum for Threads where the Actor has posted.

[Intel 471] Alias to Actor

Description

Takes an Alias and converts it to an Actor or Report entity.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Alias to Actor
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-aliastoactor
Input Entitiesmaltego.Alias
Output EntitiesPhrase
Short DescriptionTakes an Alias and converts it to an Actor or Report entity.

[Intel 471] Alias to Post

Description

Searches an Alias across all Posts.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Message Limitint2000truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Alias to Post
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-aliastopost
Input Entitiesmaltego.Alias
Output EntitiesPhrase
Short DescriptionSearches an Alias across all Posts.

[Intel 471] Bitcoin Address to Entity

Description

Bitcoin Address to Entity search.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Bitcoin Address to Entity
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-btcaddresstoentity
Input Entitiesmaltego.BTCAddress
Output EntitiesPhrase
Short DescriptionBitcoin Address to Entity search.

[Intel 471] Bitcoin to Post

Description

Searches Threads looking for Bitcoin Addresses.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Message Limitint2000truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Bitcoin to Post
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-bitcointopost
Input Entitiesmaltego.BTCAddress
Output EntitiesPhrase
Short DescriptionSearches Threads looking for Bitcoin Addresses.

[Intel 471] Crypto Currency to Post

Description

Searches Threads looking for a Crypto Currency entity for re-mining.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Message Limitint2000truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Crypto Currency to Post
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-cryptocurrencytopost
Input Entitiesintel471.cryptocurrency
Output EntitiesPhrase
Short DescriptionSearches Threads looking for a Crypto Currency entity for re-mining.

[Intel 471] Domain to Entity

Description

Domain to Entity search.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Domain to Entity
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-domaintoentity
Input Entitiesmaltego.Domain
Output EntitiesPhrase
Short DescriptionDomain to Entity search.

[Intel 471] Email to Entity

Description

Email Address to Entity search.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Email to Entity
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-emailtoentity
Input Entitiesmaltego.EmailAddress
Output EntitiesPhrase
Short DescriptionEmail Address to Entity search.

Description

Converts an Entity to an Actor Link.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Entity to Actor Link
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-entitytoactorlink
Input Entitiesintel471.Entity
Output EntitiesPhrase
Short DescriptionConverts an Entity to an Actor Link.

[Intel 471] Entity to Alias

Description

Converts an Entity to an Alias.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Entity to Alias
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-entitytoalias
Input Entitiesintel471.Entity
Output EntitiesPhrase
Short DescriptionConverts an Entity to an Alias.

[Intel 471] IM Channel Actor to Alias

Description

Converts an Instant Message Channel Actor to an Alias.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] IM Channel Actor to Alias
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-imchannelactortoalias
Input Entitiesintel471.imchannelactor
Output EntitiesPhrase
Short DescriptionConverts an Instant Message Channel Actor to an Alias.

[Intel 471] IM Channel Actor to Instant Message

Description

Takes an Instant Message Channel Actor and searches for Instant Messages.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Message Limitint2000truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] IM Channel Actor to Instant Message
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-imchannelactortoinstantmessage
Input Entitiesintel471.imchannelactor
Output EntitiesPhrase
Short DescriptionTakes an Instant Message Channel Actor and searches for Instant Messages.

[Intel 471] IM Channel to Instant Message

Description

Takes an Instant Message Channel and searches for Instant Messages.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Message Limitint2000truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] IM Channel to Instant Message
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-imchanneltoinstantmessage
Input Entitiesintel471.IMChannel
Output EntitiesPhrase
Short DescriptionTakes an Instant Message Channel and searches for Instant Messages.

[Intel 471] Instant Message Entity Extract

Description

Extracts Entities from an Instant Message.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Instant Message Entity Extract
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-imentityextract
Input Entitiesintel471.instantmessage
Output EntitiesPhrase
Short DescriptionExtracts Entities from an Instant Message.

[Intel 471] IM Server Actor to Alias

Description

Converts an Instant Message Server Actor to an Alias.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] IM Server Actor to Alias
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-imserveractortoalias
Input Entitiesintel471.instantmessageactor
Output EntitiesPhrase
Short DescriptionConverts an Instant Message Server Actor to an Alias.

[Intel 471] IM Server to Instant Message

Description

Takes an Instant Message Server and searches for Instant Messages.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Message Limitint2000truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] IM Server to Instant Message
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-imservertoinstantmessage
Input Entitiesintel471.IMServer
Output EntitiesPhrase
Short DescriptionTakes an Instant Message Server and searches for Instant Messages.

[Intel 471] IM to Channel

Description

Converts an Instant Message to a Channel.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] IM to Channel
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-imtochannel
Input Entitiesintel471.instantmessage
Output EntitiesPhrase
Short DescriptionConverts an Instant Message to a Channel.

[Intel 471] Instant Message to Instant Message Channel Actor

Description

Extracts the Actor from the specific Instant Message Channel.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Instant Message to Instant Message Channel Actor
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-imtoimchannelactor
Input Entitiesintel471.instantmessage
Output EntitiesPhrase
Short DescriptionExtracts the Actor from the specific Instant Message Channel.

[Intel 471] Instant Message to Instant Message Context

Description

Extracts the Context surrounding the Instant Message.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Regexstring truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Instant Message to Instant Message Context
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-imtoimcontext
Input Entitiesintel471.instantmessage
Output EntitiesPhrase
Short DescriptionExtracts the Context surrounding the Instant Message.

[Intel 471] Instant Message to Instant Message Server Actor

Description

Instant Message Actor raised from Channel to Server level.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Instant Message to Instant Message Server Actor
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-imtoimserveractor
Input Entitiesintel471.instantmessage
Output EntitiesPhrase
Short DescriptionInstant Message Actor raised from Channel to Server level.

[Intel 471] IM to Server

Description

Converts an Instant Message to a Server (or a Service if no Server is available).


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] IM to Server
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-imtoserver
Input Entitiesintel471.instantmessage
Output EntitiesPhrase
Short DescriptionConverts an Instant Message to a Server (or a Service if no Server is available).

[Intel 471] IP Address to Entity

Description

IP Address to Entity search.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] IP Address to Entity
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-iptoentity
Input Entitiesmaltego.IPv4Address
Output EntitiesPhrase
Short DescriptionIP Address to Entity search.

[Intel 471] Message to Thread

Description

Takes a Message entity and converts it back to its Thread.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Message to Thread
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-messagetothread
Input Entitiesintel471.post
Output EntitiesPhrase
Short DescriptionTakes a Message entity and converts it back to its Thread.

[Intel 471] Private Message Entity Extract

Description

Extracts Entities from a Private Message.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Private Message Entity Extract
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-pmentityextract
Input Entitiesintel471.privatemessage
Output EntitiesPhrase
Short DescriptionExtracts Entities from a Private Message.

[Intel 471] Private Message to Receiver

Description

Extracts the Receiver from the Private Message.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Private Message to Receiver
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-pmtoreceiver
Input Entitiesintel471.privatemessage
Output EntitiesPhrase
Short DescriptionExtracts the Receiver from the Private Message.

[Intel 471] Private Message to Sender

Description

Extracts the Sender from the Private Message


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Private Message to Sender
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-pmtosender
Input Entitiesintel471.privatemessage
Output EntitiesPhrase
Short DescriptionExtracts the Sender from the Private Message

[Intel 471] Phrase to Entity

Description

Phrase to Entity search.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Phrase to Entity
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-phrasetoentity
Input Entitiesmaltego.Phrase
Output EntitiesPhrase
Short DescriptionPhrase to Entity search.

[Intel 471] Phrase to Instant Message

Description

Searches Instant Messages for the Phrase.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Message Limitint2000truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Phrase to Instant Message
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-phrasetoinstantmessage
Input Entitiesmaltego.Phrase
Output EntitiesPhrase
Short DescriptionSearches Instant Messages for the Phrase.

[Intel 471] Phrase to Post

Description

Searches Posts for the Phrase.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Message Limitint2000truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Phrase to Post
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-phrasetopost
Input Entitiesmaltego.Phrase
Output EntitiesPhrase
Short DescriptionSearches Posts for the Phrase.

[Intel 471] Phrase to Private Message

Description

Searches Private Messages for the Phrase.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Message Limitint2000truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Phrase to Private Message
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-phrasetoprivatemessage
Input Entitiesmaltego.Phrase
Output EntitiesPhrase
Short DescriptionSearches Private Messages for the Phrase.

[Intel 471] Post Entity Extract

Description

Extracts Entities from a Post.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Post Entity Extract
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-postentityextract
Input Entitiesintel471.post
Output EntitiesPhrase
Short DescriptionExtracts Entities from a Post.

[Intel 471] Post to Alias

Description

Converts a Post back to its Alias based on the Post Author


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Post to Alias
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-posttoalias
Input Entitiesintel471.post
Output EntitiesPhrase
Short DescriptionConverts a Post back to its Alias based on the Post Author

[Intel 471] Post to Date

Description

Translates a Message or Post to a date.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Post to Date
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-posttodate
Input Entitiesintel471.post
Output EntitiesPhrase
Short DescriptionTranslates a Message or Post to a date.

[Intel 471] Post to Forum Member

Description

Takes a Post and converts to a Forum Member.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Post to Forum Member
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-posttoforummember
Input Entitiesintel471.post
Output EntitiesPhrase
Short DescriptionTakes a Post and converts to a Forum Member.

[Intel 471] Thread to Actor

Description

Takes a Thread and converts to all Actors posting on that Thread.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Thread to Actor
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-threadtoactor
Input Entitiesintel471.thread
Output EntitiesPhrase
Short DescriptionTakes a Thread and converts to all Actors posting on that Thread.

[Intel 471] Thread to Actor Post

Description

Adjust the property field to allow for extraction of Posts linked to actor_handle.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Actor Handlestring truetruefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Message Limitint2000truefalsefalse
Result filterstring truefalsefalse
Search Querystring truetruefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Thread to Actor Post
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-threadtoactorpost
Input Entitiesintel471.thread
Output EntitiesPhrase
Short DescriptionAdjust the property field to allow for extraction of Posts linked to actor_handle.

[Intel 471] Thread to Author

Description

Extracts the Author direct from the Topic.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Thread to Author
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-threadtoauthor
Input Entitiesintel471.thread
Output EntitiesPhrase
Short DescriptionExtracts the Author direct from the Topic.

[Intel 471] Thread to Forum

Description

Converts a Thread back into its parent Forum.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Thread to Forum
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-threadtoforum
Input Entitiesintel471.thread
Output EntitiesPhrase
Short DescriptionConverts a Thread back into its parent Forum.

[Intel 471] Thread to Possible Associates

Description

Determines collisions between Threat Actors on Threads.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Regexstring truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Thread to Possible Associates
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-threadtopossibleassociates
Input Entitiesintel471.post
Output EntitiesPhrase
Short DescriptionDetermines collisions between Threat Actors on Threads.

[Intel 471] Thread to Similar Topic

Description

Takes a Thread and searches across Similar Topics.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Thread to Similar Topic
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Nameadv-threadtosimilartopic
Input Entitiesintel471.thread
Output EntitiesPhrase
Short DescriptionTakes a Thread and searches across Similar Topics.

[Intel 471] Date Stripper

Description

Converts a date entity and strips away the day or month, depending on input.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Date Stripper
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namegen-datestripper
Input Entitiesmaltego.DateTime
Output EntitiesPhrase
Short DescriptionConverts a date entity and strips away the day or month, depending on input.

[Intel 471] Domain to Post

Description

Takes a Domain and searches across Posts.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Message Limitint2000truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Domain to Post
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namegen-domaintopost
Input Entitiesmaltego.Domain
Output EntitiesPhrase
Short DescriptionTakes a Domain and searches across Posts.

[Intel 471] Email to Post

Description

Takes an Email Address and searches across Posts.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Message Limitint2000truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Email to Post
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namegen-emailtopost
Input Entitiesmaltego.EmailAddress
Output EntitiesPhrase
Short DescriptionTakes an Email Address and searches across Posts.

[Intel 471] File to Post

Description

Takes a File and searches across Posts.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Message Limitint2000truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] File to Post
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namegen-filetopost
Input Entitiesmaltego.File
Output EntitiesPhrase
Short DescriptionTakes a File and searches across Posts.

[Intel 471] IP to Post

Description

Takes an IP Address and searches across Posts.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Message Limitint2000truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] IP to Post
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namegen-iptopost
Input Entitiesmaltego.IPv4Address
Output EntitiesPhrase
Short DescriptionTakes an IP Address and searches across Posts.

[Intel 471] URL to Post

Description

Takes a URL and searches across Posts.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Message Limitint2000truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] URL to Post
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namegen-urltopost
Input Entitiesmaltego.URL
Output EntitiesPhrase
Short DescriptionTakes a URL and searches across Posts.

[Intel 471] Website to Actor

Description

Take a Website and searches for Actors on that Website.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Website to Actor
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namegen-websitetoactor
Input Entitiesmaltego.Website
Output EntitiesPhrase
Short DescriptionTake a Website and searches for Actors on that Website.

[Intel 471] Website to Post

Description

Take a Website and searches across Posts.


Transform Settings

Display NameSetting TypeDefault ValueOptionalPopupAuthentication
API Keystring truefalsefalse
Date Rangedaterange truefalsefalse
Email Addressstring truefalsefalse
Message Limitint2000truefalsefalse
Result filterstring truefalsefalse
Show Entity For Empty Resultsbooleantruetruefalsefalse
Show RAG Bookmarks based on entity’s agebooleantruetruefalsefalse
Show the date inside entity’s captionbooleantruetruefalsefalse
Show the date on entity’s link linebooleanfalsetruefalsefalse

Transform Meta Info

InformationValue
Display Name[Intel 471] Website to Post
OwnerIntel 471 Inc.
Authormaltegotransforms@intel471.com
Data SourceIntel 471
Transform Namegen-websitetopost
Input Entitiesmaltego.Website
Output EntitiesPhrase
Short DescriptionTake a Website and searches across Posts.

Did you find it helpful? Yes No

Send feedback
Sorry we couldn't be helpful. Help us improve this article with your feedback.