Open navigation

Paterva CTAS

Modified on: Wed, 21 Sep, 2022 at 6:33 PM

Overview

Maltego's Paterva CTAS Transforms are provided to Maltego users as part of the Maltego Standard Transforms which any Maltego Desktop Client has access to. The Maltego Standard Transforms support a vast variety of investigative tasks, including network footprinting, social media investigations, digital forensics, enriching threat intelligence, analyzing web content and more. They can be used on their own to conduct investigations, or supplement other specialized integrations available in the Transform Hub.


For more information about Maltego Standard Transforms click here


Standard Transforms: Paterva CTAS Transforms

To Friends [Get Flickr Friends]

Description

Enumerate friends of a specific flickr user.

Transform Meta Info

Information Value
Display Name To Friends [Get Flickr Friends]
Owner Paterva
Author AndrewW
Data Source Get Flickr Friends
Transform Name FlickrAccountGetFriends
Short Description Enumerate friends of a specific flickr user.
Input Entities maltego.affiliation.Flickr
Output Entities maltego.affiliation.Flickr

To Alias

Transform Meta Info

Information Value
Display Name To Alias
Owner Paterva
Author AndrewW
Data Source  
Transform Name toAliasFromTwitterAccount
Short Description  
Input Entities maltego.affiliation.Twitter
Output Entities maltego.Alias

To Location [From Bio]

Description

Extract the location from a Twitter affiliations bio.

Transform Meta Info

Information Value
Display Name To Location [From Bio]
Owner Paterva
Author Paterva
Data Source From Bio
Transform Name AffTwitterToLocation
Short Description Extract the location from a Twitter affiliations bio.
Input Entities maltego.affiliation.Twitter
Output Entities maltego.Location

To Person [Convert]

Description

This transform will convert the Affiliation to a person, with the alias in the ‘additional’ field

Transform Meta Info

Information Value
Display Name To Person [Convert]
Owner Paterva
Author Paterva
Data Source Convert
Transform Name AffTwitterToPerson
Short Description This transform will convert the Affiliation to a person, with the alias in the ‘additional’ field
Input Entities maltego.affiliation.Twitter
Output Entities maltego.Person

To Social Account [Using NameChk]

Description

This transform will query NameChk.com for social accounts with the given alias.

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
NameChkApi Namecheck API Key string True True False

Transform Meta Info

Information Value
Display Name To Social Account [Using NameChk]
Owner Paterva
Author AndrewW
Data Source Using NameChk
Transform Name namechk
Short Description This transform will query NameChk.com for social accounts with the given alias.
Input Entities maltego.Alias
Output Entities maltego.Alias

To DNS Name [From DynDNS username]

Description

Looks up an alias against a list of dyndns domains.

Transform Meta Info

Information Value
Display Name To DNS Name [From DynDNS username]
Owner Paterva
Author AndrewW
Data Source From DynDNS username
Transform Name toDynDNSNames
Short Description Looks up an alias against a list of dyndns domains.
Input Entities maltego.Alias
Output Entities maltego.DNSName

To Phrase [Change Entity Type]

Description

Converts an Alias to a phrase entity.

Transform Meta Info

Information Value
Display Name To Phrase [Change Entity Type]
Owner Paterva
Author AndrewW
Data Source Change Entity Type
Transform Name convertToPhrase
Short Description Converts an Alias to a phrase entity.
Input Entities maltego.Alias
Output Entities maltego.Phrase

To DNS Name [Enumerate hostname numerically]

Description

Enumerates hostnames numerically. E.g. mail1.paterva.com would try mail2., mail3.

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
autoPadding Auto Padding boolean True True True False
padding Padding int 0 True True False
rangeEnd Range End int 9 True True False
rangeStart Range Start int 1 True True False

Transform Meta Info

Information Value
Display Name To DNS Name [Enumerate hostname numerically]
Owner Paterva
Author AndrewW
Data Source Enumerate hostname numerically
Transform Name enumerateHostNamesNumerically
Short Description Enumerates hostnames numerically. E.g. mail1.paterva.com would try mail2., mail3.
Input Entities maltego.DNSName
Output Entities maltego.DNSName

To Domains [DNS]

Transform Meta Info

Information Value
Display Name To Domains [DNS]
Owner Paterva
Author AndrewW
Data Source DNS
Output Entities maltego.Domain

Variants

Transform Name Short Description Input Entities
DNSNameToDomain_DNS This transform extracts all the domains from a DNS Name - it excludes TLDs and SLD. maltego.DNSName
DomainToDomain_Sub This transform extracts all the domains from a domain name - it excludes TLDs and SLD. maltego.Domain

To IP Address [DNS]

Description

This transform resolves a DNS name to an IP address using plain old DNS

Transform Meta Info

Information Value
Display Name To IP Address [DNS]
Owner Paterva
Author Paterva
Data Source DNS
Transform Name DNSNameToIPAddress_DNS
Short Description This transform resolves a DNS name to an IP address using plain old DNS
Input Entities maltego.DNSName
Output Entities maltego.IPv4Address

To Web site [Query ports]

Description

This transform detemines if a DNS Name is a Web Site by checking for responsive HTTP(s) ports.

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
http_ports HTTP Query Ports string [‘80’] True True False
https_ports HTTPS Query Ports string [‘443’] True True False
timeout HTTP timeout (ms) int 8000 True True False

Transform Meta Info

Information Value
Display Name To Web site [Query ports]
Owner Paterva
Author Paterva
Data Source Query ports
Transform Name DNSNameToWebsite_QueryPorts
Short Description This transform detemines if a DNS Name is a Web Site by checking for responsive HTTP(s) ports.
Input Entities maltego.DNSName
Output Entities maltego.Website

To Entities [IBM Watson]

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
companies_to_ignore Companies To Ignore string [‘icann’, ‘google’, ‘microsoft’, ‘ibm’, ‘facebook’, ‘twitter’, ‘adobe’, ‘creative commons’, ‘hp’, ‘yahoo’, ‘amazon’, ‘youtube’, ‘apple’, ‘ebay’, ‘paypal’] True True False

Transform Meta Info

Information Value
Display Name To Entities [IBM Watson]
Owner Paterva
Author PR
Data Source IBM Watson

Variants

Transform Name Short Description Input Entities Output Entities
DocumentToEntities This transform extracts named entities (person, company etc) from the document. maltego.Document maltego.Person,maltego.EmailAddress,maltego.Phrase,maltego.Document
toEntitiesNERTwitter Extracts named entities using IBM Watson. maltego.Twit maltego.Phrase
URLToPerson_NLP This transform uses Natural Language Processing (NLP/NER) to extract entities maltego.URL maltego.Phrase

Parse meta information

Description

This transform extracts the meta information from the document and then parses it for username (persons) and/or email addresses.

Transform Meta Info

Information Value
Display Name Parse meta information
Owner Paterva
Author Paterva
Data Source
Transform Name DocumentToPersonEmail_Meta
Short Description This transform extracts the meta information from the document and then parses it for username (persons) and/or email addresses.
Input Entities maltego.Document
Output Entities maltego.Person,maltego.EmailAddress,maltego.Phrase,maltego.Document

To URL [Show SE results]

Description

This transform just dumps the URL of the Document for further use.

Transform Meta Info

Information Value
Display Name To URL [Show SE results]
Owner Paterva
Author Paterva
Data Source Show SE results
Transform Name DocumentToURL_Dump
Short Description This transform just dumps the URL of the Document for further use.
Input Entities maltego.Document
Output Entities maltego.URL

To DNS Name [Using Name Schema dictionary]

Description

This transform will try test various name schema’s against a domain.

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
testDepth Test depth for Name Schema Files int 4 True True False

Transform Meta Info

Information Value
Display Name To DNS Name [Using Name Schema dictionary]
Owner Paterva
Author AndrewW
Data Source Using Name Schema dictionary
Transform Name DomainToDNSNameSchema
Short Description This transform will try test various name schema’s against a domain.
Input Entities maltego.Domain
Output Entities maltego.DNSName

To DNS Name [Find common DNS names]

Description

This transform will try to discover various common DNS Names in a domain.

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
brutelist DNS Names to test string mail,mx,ns,ftp,webmail,web,gateway,secure,intranet,extranet,smtp,pop,ns1,mx1,email,admin,dmz,blog,dns,forum,ntp,pub,route,sql,ssh,webaccess,xml,imap, True True False

Transform Meta Info

Information Value
Display Name To DNS Name [Find common DNS names]
Owner Paterva
Author Paterva
Data Source Find common DNS names
Transform Name DomainToDNSName_DNSBrute
Short Description This transform will try to discover various common DNS Names in a domain.
Input Entities maltego.Domain
Output Entities maltego.DNSName

To DNS Name [Attempt zone transfer]

Description

This transform will attempt to perform a zone transfer a returns A and Cname records

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
ss_to Timeout (seconds) int 8 True True False

Transform Meta Info

Information Value
Display Name To DNS Name [Attempt zone transfer]
Owner Paterva
Author Paterva
Data Source Attempt zone transfer
Transform Name DomainToDNSName_ZT
Short Description This transform will attempt to perform a zone transfer a returns A and Cname records
Input Entities maltego.Domain
Output Entities maltego.DNSName

To Files (Interesting) [using Search Engine]

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
HTTP_Timeout HTTP timeout (ms) int 8000 True True False
extensions Search Extension [extension:priority] string [‘sql:100’, ‘zip:90’, ‘csv:90’, ‘tgz:90’, ‘bak:90’, ‘old:90’, ‘wav:20’, ‘mp3:20’, ‘exe:20’, ‘txt:20’] True True False

Transform Meta Info

Information Value
Display Name To Files (Interesting) [using Search Engine]
Owner Paterva
Author Paterva
Data Source using Search Engine
Output Entities maltego.Document

Variants

Transform Name Short Description Input Entities
DomainToDocumentOther_SE Search for interesting files hosted on this domain. maltego.Domain
PhraseToDocumentOthers_SE This transform will search for the given phrase and show interesting files contaning the term. maltego.Phrase

To Files (Office) [using Search Engine]

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
HTTP_Timeout HTTP timeout (ms) int 8000 True True False
extensions Search Extension [extension:priority] string [‘xls:100’, ‘xlsx:100’, ‘csv:100’, ‘doc:70’, ‘docx:70’, ‘ppt:40’, ‘pptx:40’, ‘mdb:40’, ‘pdf:40’] True True False

Transform Meta Info

Information Value
Display Name To Files (Office) [using Search Engine]
Owner Paterva
Author Paterva
Data Source using Search Engine
Output Entities maltego.Document

Variants

Transform Name Short Description Input Entities
DomainToDocument_SE Search for office documents hosted on this domain. maltego.Domain
PhraseToDocument_SE This transform will search for the given phrase and show documents (Office[tm]) containing the term. maltego.Phrase

To Emails @domain [using Search Engine]

Description

Search for emails containing the domain.

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
HTTP_Timeout HTTP timeout (ms) int 8000 True True False

Transform Meta Info

Information Value
Display Name To Emails @domain [using Search Engine]
Owner Paterva
Author Paterva
Data Source using Search Engine
Transform Name DomainToEmailAddress_AtDomain_SE
Short Description Search for emails containing the domain.
Input Entities maltego.Domain
Output Entities maltego.EmailAddress

To Email addresses [using Search Engine]

Description

Search for related emails.

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
HTTP_Timeout HTTP timeout (ms) int 8000 True True False

Transform Meta Info

Information Value
Display Name To Email addresses [using Search Engine]
Owner Paterva
Author Paterva
Data Source using Search Engine
Transform Name DomainToEmailAddress_SE
Short Description Search for related emails.
Input Entities maltego.Domain
Output Entities maltego.EmailAddress

To Email address [From whois info]

Description

This transform obtains whois information of the IP number, then parses it for email addresses.

Transform Meta Info

Information Value
Display Name To Email address [From whois info]
Owner Paterva
Author Paterva
Data Source From whois info
Short Description This transform obtains whois information of the IP number, then parses it for email addresses.
Output Entities maltego.EmailAddress

Variants

Transform Name Input Entities
DomainToEmailAddress_Whois maltego.Domain
IPAddressToEmailAddress_Whois maltego.IPv4Address

To Entities from WHOIS [IBM Watson]

Description

This transform obtains whois information of the domain then parses it for entities using NER

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
companies_to_ignore Companies To Ignore string [‘icann’, ‘google’, ‘microsoft’, ‘ibm’, ‘facebook’, ‘twitter’, ‘adobe’, ‘creative commons’, ‘hp’, ‘yahoo’, ‘amazon’, ‘youtube’, ‘apple’, ‘ebay’, ‘paypal’] True True False

Transform Meta Info

Information Value
Display Name To Entities from WHOIS [IBM Watson]
Owner John Doe
Author John Doe
Data Source IBM Watson
Transform Name DomainToEntities_Whois_NER
Short Description This transform obtains whois information of the domain then parses it for entities using NER
Input Entities maltego.Domain
Output Entities maltego.Phrase

To DNS Name - MX (mail server)

Description

This transform will find the MX records (mail servers) of a domain.

Transform Meta Info

Information Value
Display Name To DNS Name - MX (mail server)
Owner Paterva
Author Paterva
Data Source
Transform Name DomainToMXrecord_DNS
Short Description This transform will find the MX records (mail servers) of a domain.
Input Entities maltego.Domain
Output Entities maltego.MXRecord

To DNS Name - NS (name server)

Description

This transform will find the NS records (name servers) of a domain.

Transform Meta Info

Information Value
Display Name To DNS Name - NS (name server)
Owner Paterva
Author Paterva
Data Source
Transform Name DomainToNSrecord_DNS
Short Description This transform will find the NS records (name servers) of a domain.
Input Entities maltego.Domain
Output Entities maltego.NSRecord

To Phone Numbers [using Search Engine]

Description

Search for related phone numbers.

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
HTTP_Timeout HTTP timeout (ms) int 8000 True True False

Transform Meta Info

Information Value
Display Name To Phone Numbers [using Search Engine]
Owner Paterva
Author Paterva
Data Source using Search Engine
Transform Name DomainToPhoneNumber_SE
Short Description Search for related phone numbers.
Input Entities maltego.Domain
Output Entities maltego.PhoneNumber

To Phone numbers [From whois info]

Description

This transforms obtains whois information of the given domain, then parses it for telephone numbers.

Transform Meta Info

Information Value
Display Name To Phone numbers [From whois info]
Owner Paterva
Author Paterva
Data Source From whois info
Transform Name DomainToPhone_Whois
Short Description This transforms obtains whois information of the given domain, then parses it for telephone numbers.
Input Entities maltego.Domain
Output Entities maltego.PhoneNumber

To DNS Name - SOA (Start of Authority)

Description

Extracts information for this domain from the SOA record.

Transform Meta Info

Information Value
Display Name To DNS Name - SOA (Start of Authority)
Owner Paterva
Author AndrewW
Data Source
Transform Name DomainToSOAInformation
Short Description Extracts information for this domain from the SOA record.
Input Entities maltego.Domain
Output Entities maltego.NSRecord, maltego.EmailAddress

To DNS Name - SPF (sender policy framework)

Description

Extracts information for this domain from the SPF (txt) record.

Transform Meta Info

Information Value
Display Name To DNS Name - SPF (sender policy framework)
Owner Paterva
Author AndrewW
Data Source
Transform Name DomainToSPFInformation
Short Description Extracts information for this domain from the SPF (txt) record.
Input Entities maltego.Domain
Output Entities maltego.Netblock, maltego.IPv4Address, maltego.DNSName, maltego.MXRecord, maltego.DNSName, maltego.Domain

To Website using domain [Bing]

Description

Search for websites that contain the domain.

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
HTTP_Timeout HTTP timeout (ms) int 8000 True True False

Transform Meta Info

Information Value
Display Name To Website using domain [Bing]
Owner Paterva
Author Paterva
Data Source Bing
Transform Name DomainToWebsiteDNS_SE
Short Description Search for websites that contain the domain.
Input Entities maltego.Domain
Output Entities maltego.Website

To Website [Quick lookup]

Description

This transform will check to see if there is a www.DOMAIN entry. Useful when used in bulk.

Transform Meta Info

Information Value
Display Name To Website [Quick lookup]
Owner Paterva
Author Paterva
Data Source Quick lookup
Transform Name DomainToWebsite_DNS
Short Description This transform will check to see if there is a www.DOMAIN entry. Useful when used in bulk.
Input Entities maltego.Domain
Output Entities maltego.Website

To Website mentioning domain [Bing]

Description

Search for websites mentioning the domain in their content.

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
HTTP_Timeout HTTP timeout (ms) int 8000 True True False

Transform Meta Info

Information Value
Display Name To Website mentioning domain [Bing]
Owner Paterva
Author Paterva
Data Source Bing
Transform Name DomainToWebsite_SE
Short Description Search for websites mentioning the domain in their content.
Input Entities maltego.Domain
Output Entities maltego.Website

To Website [using Search Engine]

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
HTTP_Timeout HTTP timeout (ms) int 8000 True True False

Transform Meta Info

Information Value
Display Name To Website [using Search Engine]
Owner Paterva
Author Paterva
Data Source using Search Engine
Output Entities maltego.Website

Variants

Transform Name Short Description Input Entities
EmailAddressToDNSName_SE Search for websites that mention the email. maltego.EmailAddress
PhoneNumberToWebsite_SE This transform searches for the telephone number and returns related sites. maltego.PhoneNumber
PhraseToWebsite_SE This transform will search for the given phrase and show the sites where the phrase occurs. maltego.Phrase

To Domain [DNS]

Description

This transform will remove the part in front of the @ sign of the given address.

Transform Meta Info

Information Value
Display Name To Domain [DNS]
Owner Paterva
Author Paterva
Data Source DNS
Transform Name EmailAddressToDomain_DNS
Short Description This transform will remove the part in front of the @ sign of the given address.
Input Entities maltego.EmailAddress
Output Entities maltego.Domain

To Email Addresses [using Search Engine]

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
HTTP_Timeout HTTP timeout (ms) int 8000 True True False

Transform Meta Info

Information Value
Display Name To Email Addresses [using Search Engine]
Owner Paterva
Author Paterva
Data Source using Search Engine
Output Entities maltego.EmailAddress

Variants

Transform Name Short Description Input Entities
EmailAddressToEmailAddress_SE This transform will search for the email address and show related email addresses. maltego.EmailAddress
PhraseToEmailAddress_SE This transform will search for the phrase and show related email addresses. maltego.Phrase

Verify email address exists [SMTP]

Description

This transform simply connects to the relevant mail server and checks to see if the email address exists. The results are passed back in the same entity - as a label.

Transform Meta Info

Information Value
Display Name Verify email address exists [SMTP]
Owner Paterva
Author Paterva
Data Source SMTP
Transform Name EmailAddressToEmailAddress_Verify
Short Description This transform simply connects to the relevant mail server and checks to see if the email address exists. The results are passed back in the same entity - as a label.
Input Entities maltego.EmailAddress
Output Entities maltego.EmailAddress

To Person [Parse separator]

Description

This transform tries to figure out if it can parse the email address to a person’s name using separators

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
format Format (FL-firstnamelastname,LF-lastnamefirstname) string FL True True False

Transform Meta Info

Information Value
Display Name To Person [Parse separator]
Owner Paterva
Author Paterva
Data Source Parse separator
Transform Name EmailAddressToPerson_Parse
Short Description This transform tries to figure out if it can parse the email address to a person’s name using separators
Input Entities maltego.EmailAddress
Output Entities maltego.Person

To Phone number [using Search Engine]

Description

This transform will search for the given email address and show the related telephone numbers.

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
HTTP_Timeout HTTP timeout (ms) int 8000 True True False

Transform Meta Info

Information Value
Display Name To Phone number [using Search Engine]
Owner Paterva
Author Paterva
Data Source using Search Engine
Transform Name EmailAddressToPhoneNumber_SE
Short Description This transform will search for the given email address and show the related telephone numbers.
Input Entities maltego.EmailAddress
Output Entities maltego.PhoneNumber

To URLs [Show Search Engine results]

Description

This transform just dumps the URLs collected from the search engine.

Transform Meta Info

Information Value
Display Name To URLs [Show Search Engine results]
Owner Paterva
Author Paterva
Data Source Show Search Engine results
Short Description This transform just dumps the URLs collected from the search engine.
Output Entities maltego.URL

Variants

Transform Name Input Entities
EmailAddressToURL_Expand maltego.EmailAddress
PhoneNumberToURL_Expand maltego.PhoneNumber

To Flickr Account

Description

Looks up an email address on flickr and returns account details.

Transform Meta Info

Information Value
Display Name To Flickr Account
Owner Paterva
Author AndrewW
Data Source
Transform Name emailToFlickrAccount
Short Description Looks up an email address on flickr and returns account details.
Input Entities maltego.EmailAddress
Output Entities maltego.affiliation.Flickr

To Myspace Account

Description

Looks up an email address on myspace and returns account details.

Transform Meta Info

Information Value
Display Name To Myspace Account
Owner Paterva
Author AndrewW
Data Source
Transform Name emailToMyspaceAccount
Short Description Looks up an email address on myspace and returns account details.
Input Entities maltego.EmailAddress
Output Entities maltego.affiliation.Myspace, maltego.Alias

To Circular Area

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
areaRoundValue Radius of Area in m int 1000 True True False

Transform Meta Info

Information Value
Display Name To Circular Area
Owner Paterva
Author AndrewW
Data Source  
Transform Name ToArea
Short Description  
Input Entities maltego.GPS
Output Entities maltego.CircularArea

To Location [Using nominatim.openstreetmap.org]

Description

Takes GPS Co-ordinates to an address via nominatim.openstreetmap.org

Transform Meta Info

Information Value
Display Name To Location [Using nominatim.openstreetmap.org]
Owner Paterva
Author AndrewW
Data Source Using nominatim.openstreetmap.org
Transform Name toLocationGeoCode
Short Description Takes GPS Co-ordinates to an address via nominatim.openstreetmap.org
Input Entities maltego.GPS
Output Entities maltego.Location

To Location (broad) [Using nominatim.openstreetmap.org]

Description

Takes GPS Co-ordinates to an broader address via nominatim.openstreetmap.org

Transform Meta Info

Information Value
Display Name To Location (broad) [Using nominatim.openstreetmap.org]
Owner Paterva
Author AndrewW
Data Source Using nominatim.openstreetmap.org
Transform Name toLocationGeoCodeBroad
Short Description Takes GPS Co-ordinates to an broader address via nominatim.openstreetmap.org
Input Entities maltego.GPS
Output Entities maltego.Location

To Website using IP: [Bing]

Description

Search for websites that have been hosted on this IP.

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
HTTP_Timeout HTTP timeout (ms) int 8000 True True False

Transform Meta Info

Information Value
Display Name To Website using IP: [Bing]
Owner Paterva
Author Paterva
Data Source Bing
Transform Name IPAddressToDNSNameBing_SE
Short Description Search for websites that have been hosted on this IP.
Input Entities maltego.IPv4Address
Output Entities maltego.Website

To DNS Name [Reverse DNS]

Description

This transform reverse resolves an IP address to a DNS name using plain old DNS

Transform Meta Info

Information Value
Display Name To DNS Name [Reverse DNS]
Owner Paterva
Author Paterva
Data Source Reverse DNS
Transform Name IPAddressToDNSName_DNS
Short Description This transform reverse resolves an IP address to a DNS name using plain old DNS
Input Entities maltego.IPv4Address
Output Entities maltego.DNSName

To Entities From WHOIS [IBM Watson]

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
companies_to_ignore Companies To Ignore string [‘icann’, ‘google’, ‘microsoft’, ‘ibm’, ‘facebook’, ‘twitter’, ‘adobe’, ‘creative commons’, ‘hp’, ‘yahoo’, ‘amazon’, ‘youtube’, ‘apple’, ‘ebay’, ‘paypal’] True True False

Transform Meta Info

Information Value
Display Name To Entities From WHOIS [IBM Watson]
Owner  
Author  
Data Source IBM Watson
Output Entities maltego.Phrase

Variants

Transform Name Short Description Input Entities
IPAddressToEntities_Whois_NER This transform obtains whois information of IP number, then parses it for entities using NER maltego.IPv4Address
NetblockToEntities_NER_Whois This transform obtains whois information of netblock (well the first IP in the block), then parses it for entities using NER maltego.Netblock

To Netblock [Using natural boundaries]

Description

This transform will carve a netblock from an IP - counting a certain number of IPs up and down.

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
cutsize Block Size int 256 True True False

Transform Meta Info

Information Value
Display Name To Netblock [Using natural boundaries]
Owner Paterva
Author Paterva
Data Source Using natural boundaries
Transform Name IPAddressToNetblock_Cuts
Short Description This transform will carve a netblock from an IP - counting a certain number of IPs up and down.
Input Entities maltego.IPv4Address
Output Entities maltego.Netblock

To Netblock [Blocks delegated to this IP as NS]

Description

This transform will contact Robtex and determine if the IP number has any reverse DNS netblocks has been delegated to it.

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
rt_to Robtex HTTP timeout (ms) int 25000 True True False

Transform Meta Info

Information Value
Display Name To Netblock [Blocks delegated to this IP as NS]
Owner Paterva
Author Paterva
Data Source Blocks delegated to this IP as NS
Transform Name IPAddressToNetblock_NS4block
Short Description This transform will contact Robtex and determine if the IP number has any reverse DNS netblocks has been delegated to it.
Input Entities maltego.IPv4Address
Output Entities maltego.Netblock

To Netblock [Using whois info]

Description

This transform will get the netblock via the whois service (ARIN/APNIC/LACNIC/AFRINIC/RIPE)

Transform Meta Info

Information Value
Display Name To Netblock [Using whois info]
Owner Paterva
Author Paterva
Data Source Using whois info
Transform Name IPAddressToNetblock_whois
Short Description This transform will get the netblock via the whois service (ARIN/APNIC/LACNIC/AFRINIC/RIPE)
Input Entities maltego.IPv4Address
Output Entities maltego.Netblock

To Phone number [From whois info]

Description

Transforms obtains whois information of IP number, then parses it for telephone numbers

Transform Meta Info

Information Value
Display Name To Phone number [From whois info]
Owner Paterva
Author Paterva
Data Source From whois info
Transform Name IPAddressToPhone_Whois
Short Description Transforms obtains whois information of IP number, then parses it for telephone numbers
Input Entities maltego.IPv4Address
Output Entities maltego.PhoneNumber

To Website mentioning IP [Bing]

Description

Find websites containing the IP.

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
HTTP_Timeout HTTP timeout (ms) int 8000 True True False

Transform Meta Info

Information Value
Display Name To Website mentioning IP [Bing]
Owner Paterva
Author Paterva
Data Source Bing
Transform Name IPAddressToWebsite_SE
Short Description Find websites containing the IP.
Input Entities maltego.IPv4Address
Output Entities maltego.Website

To Location [city, country]

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
language Country Language string en True True False

Transform Meta Info

Information Value
Display Name To Location [city, country]
Owner Paterva
Author AndrewW
Data Source city, country
Output Entities maltego.Location

Variants

Transform Name Short Description Input Entities
toLocation This transform takes an IP address to a location with the MaxMind free city database. maltego.IPv4Address
toLocationNetblock This transform takes an netblock to a location with the MaxMind free city database. maltego.Netblock

To Location [country]

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
language Country Language string en True True False

Transform Meta Info

Information Value
Display Name To Location [country]
Owner Paterva
Author AndrewW
Data Source country
Output Entities maltego.Location

Variants

Transform Name Short Description Input Entities
toLocationCountry This transform takes an IP address to a location with the MaxMind free city database. maltego.IPv4Address
toLocationCountryNetblock This transform takes a Netblock to a location with the MaxMind free city database. maltego.Netblock

To IP addresses [Found in Netblock]

Description

Converts Netblock to IPs within that netblock.

Transform Meta Info

Information Value
Display Name To IP addresses [Found in Netblock]
Owner Paterva
Author AndrewW
Data Source Found in Netblock
Transform Name NetblockToIPs
Short Description Converts Netblock to IPs within that netblock.
Input Entities maltego.Netblock
Output Entities maltego.IPv4Address

To Netblocks [Cuts Netblock into smaller ones]

Description

Converts Netblock to smaller Netblocks.

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
netblockSize Netblock size string True True False

Transform Meta Info

Information Value
Display Name To Netblocks [Cuts Netblock into smaller ones]
Owner Paterva
Author AndrewW
Data Source Cuts Netblock into smaller ones
Transform Name NetblockToNetblocks
Short Description Converts Netblock to smaller Netblocks.
Input Entities maltego.Netblock
Output Entities maltego.Netblock

To EmailAddress [Bing]

Description

Search for possible email addresses.

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
HTTP_Timeout HTTP timeout (ms) int 8000 True True False
additional Additional term (space=none) string True True False
site Domain/TLD (space=none) string True True False

Transform Meta Info

Information Value
Display Name To EmailAddress [Bing]
Owner Paterva
Author Paterva
Data Source Bing
Transform Name PersonToEmailAddress_SE
Short Description Search for possible email addresses.
Input Entities maltego.Person
Output Entities maltego.EmailAddress

To PhoneNumber [Bing]

Description

Search for possible phone numbers.

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
HTTP_Timeout HTTP timeout (ms) int 8000 True True False
additional Additional term (space=none) string True True False
site Domain/TLD (space=none) string True True False

Transform Meta Info

Information Value
Display Name To PhoneNumber [Bing]
Owner Paterva
Author Paterva
Data Source Bing
Transform Name PersonToPhoneNumber_SE
Short Description Search for possible phone numbers.
Input Entities maltego.Person
Output Entities maltego.Website

To Website [Bing]

Description

This transform shows sites where a permutation of the person’s name was found.

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
HTTP_Timeout HTTP timeout (ms) int 8000 True True False
additional Additional term (space=none) string True True False
site Domain/TLD (space=none) string True True False

Transform Meta Info

Information Value
Display Name To Website [Bing]
Owner Paterva
Author Paterva
Data Source Bing
Transform Name PersonToWebsite_SE
Short Description This transform shows sites where a permutation of the person’s name was found.
Input Entities maltego.Person
Output Entities maltego.Website

To Email Address [using Search Engine]

Description

This transform searches for the telephone number and returns related email addresses.

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
HTTP_Timeout HTTP timeout (ms) int 8000 True True False

Transform Meta Info

Information Value
Display Name To Email Address [using Search Engine]
Owner Paterva
Author Paterva
Data Source using Search Engine
Transform Name PhoneNumberToEmailAddress_SE
Short Description This transform searches for the telephone number and returns related email addresses.
Input Entities maltego.PhoneNumber
Output Entities maltego.EmailAddress

To Phone Number [using Search Engine]

Description

This transform searches for the telephone number and returns related telephone numbers.

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
HTTP_Timeout HTTP timeout (ms) int 8000 True True False

Transform Meta Info

Information Value
Display Name To Phone Number [using Search Engine]
Owner Paterva
Author Paterva
Data Source using Search Engine
Transform Name PhoneNumberToPhoneNumber_SE
Short Description This transform searches for the telephone number and returns related telephone numbers.
Input Entities maltego.PhoneNumber
Output Entities maltego.PhoneNumber

To Telephone numbers [using Search Engine]

Description

This transform will search for the phrase and shows the related telephone numbers.

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
HTTP_Timeout HTTP timeout (ms) int 8000 True True False
exact_match Exact Match boolean False True True False

Transform Meta Info

Information Value
Display Name To Telephone numbers [using Search Engine]
Owner Paterva
Author Paterva
Data Source using Search Engine
Transform Name PhraseToPhoneNumber_SE
Short Description This transform will search for the phrase and shows the related telephone numbers.
Input Entities maltego.Phrase
Output Entities maltego.PhoneNumber

To Websites - specifics (pastebin) [using SE]

Description

This transform will search for the given phrase and show the sites where the phrase occurs.

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
HTTP_Timeout HTTP timeout (ms) int 8000 True True False
exact_match Exact Match boolean False True True False
sitelist Site List string [‘pastie.org’, ‘pastebin.com’, ‘pastebin.ca’] True True False

Transform Meta Info

Information Value
Display Name To Websites - specifics (pastebin) [using SE]
Owner Paterva
Author Paterva
Data Source using SE
Transform Name PhraseToSpecificSites_SE
Short Description This transform will search for the given phrase and show the sites where the phrase occurs.
Input Entities maltego.Phrase
Output Entities maltego.Website

To Aliases [mentioned in Tweet]

Description

The transform will extract aliases from a tweet.

Transform Meta Info

Information Value
Display Name To Aliases [mentioned in Tweet]
Owner Paterva
Author AndrewW
Data Source mentioned in Tweet
Transform Name pullAliases
Short Description The transform will extract aliases from a tweet.
Input Entities maltego.Twit
Output Entities maltego.Alias

To Hash Tags

Description

Simply splits tweet into words and pulls the hashtag.

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
IgnoreHashes Hashes to ignore. string True True False

Transform Meta Info

Information Value
Display Name To Hash Tags
Owner Paterva
Author AndrewW
Data Source
Transform Name pullHashTags
Short Description Simply splits tweet into words and pulls the hashtag.
Input Entities maltego.Twit
Output Entities maltego.hashtag

To Sentiment [IBM Watson]

Description

This transform will get a sentiment of a Tweet.

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
companies_to_ignore Companies To Ignore string [‘icann’, ‘google’, ‘microsoft’, ‘ibm’, ‘facebook’, ‘twitter’, ‘adobe’, ‘creative commons’, ‘hp’, ‘yahoo’, ‘amazon’, ‘youtube’, ‘apple’, ‘ebay’, ‘paypal’] True True False

Transform Meta Info

Information Value
Display Name To Sentiment [IBM Watson]
Owner Paterva
Author PR
Data Source IBM Watson
Transform Name TweetSentiment
Short Description This transform will get a sentiment of a Tweet.
Input Entities maltego.Twit
Output Entities Phrase

To Stock Symbol

Description

Simply splits tweet into words and pulls the stock symbols.

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
IgnoreHashes Stocks to ignore. string True True False

Transform Meta Info

Information Value
Display Name To Stock Symbol
Owner Paterva
Author AndrewW
Data Source
Transform Name pullStockSymbol
Short Description Simply splits tweet into words and pulls the stock symbols.
Input Entities maltego.Twit
Output Entities maltego.StockSymbol

Description

Try return URLs from tweets.

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
expand_urls Expand URLs boolean True True True False
include_tweets Include Tweet Links boolean False True True False

Transform Meta Info

Information Value
Display Name To URLs [Extracts links from Tweet]
Owner Paterva
Author AndrewW
Data Source Extracts links from Tweet
Transform Name pullURLs
Short Description Try return URLs from tweets.
Input Entities maltego.Twit
Output Entities maltego.URL

To Words [English]

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
ignoreRT Ignore Retweets boolean True True True False
wordListDepth Word List Depth int 3500 True True False

Transform Meta Info

Information Value
Display Name To Words [English]
Owner Paterva
Author AndrewW
Data Source English
Transform Name TweetToWords
Short Description  
Input Entities maltego.Twit
Output Entities maltego.Phrase

To Other Sites With Same Code

Description

This transform returns websites that use the same tracking code.

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
spyonwebApi Spy on Web API string True True False

Transform Meta Info

Information Value
Display Name To Other Sites With Same Code
Owner Paterva
Author AndrewW
Data Source
Transform Name toSitesIdentifier
Short Description This transform returns websites that use the same tracking code.
Input Entities maltego.UniqueIdentifier
Output Entities maltego.Phrase

To Email Addresses [Found on web page]

Description

This transform finds the email addresses on the URL

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
HTTP_Timeout HTTP timeout (ms) int 8000 True True False

Transform Meta Info

Information Value
Display Name To Email Addresses [Found on web page]
Owner Paterva
Author Paterva
Data Source Found on web page
Transform Name URLToEmail_Parse
Short Description This transform finds the email addresses on the URL
Input Entities maltego.URL
Output Entities maltego.EmailAddress

To Phone numbers [Found on this web page]

Description

This transform finds the phone numbers on the URL

Transform Meta Info

Information Value
Display Name To Phone numbers [Found on this web page]
Owner Paterva
Author Paterva
Data Source Found on this web page
Transform Name URLToPhoneNumber_Parse
Short Description This transform finds the phone numbers on the URL
Input Entities maltego.URL
Output Entities maltego.PhoneNumber

URL to Title

Description

Fetches title from a given URL. Looks for HTTP and simple JS redirects.

Transform Meta Info

Information Value
Display Name URL to Title
Owner Paterva
Author AndrewW
Data Source
Transform Name URLToTitle
Short Description Fetches title from a given URL. Looks for HTTP and simple JS redirects.
Input Entities maltego.URL
Output Entities maltego.WebTitle

To Website [Convert]

Description

This transform converts an URL to a website

Transform Meta Info

Information Value
Display Name To Website [Convert]
Owner Paterva
Author AndrewW
Data Source Convert
Transform Name URLToWebsite_Convert
Short Description This transform converts an URL to a website
Input Entities maltego.URL
Output Entities maltego.Website

Description

This transform looks for outgoing links on the URL and show them as websites

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
HTTP_Timeout HTTP timeout (ms) int 8000 True True False

Transform Meta Info

Information Value
Display Name To Website [Links on this web page]
Owner Paterva
Author Paterva
Data Source Links on this web page
Transform Name URLToWebsite_Parse
Short Description This transform looks for outgoing links on the URL and show them as websites
Input Entities maltego.URL
Output Entities maltego.Website

Mirror: Email addresses found

Description

This transform uses a website mirror to spider the site and extract email addresses

Transform Meta Info

Information Value
Display Name Mirror: Email addresses found
Owner Paterva
Author Paterva
Data Source
Transform Name WebsiteToEmailAddress_Mirror
Short Description This transform uses a website mirror to spider the site and extract email addresses
Input Entities maltego.Website
Output Entities maltego.EmailAddress

To Website Title

Description

Fetches title from a given website. Looks for HTTP and simple JS redirects.

Transform Settings

Setting Name Display Name Setting Type Default Value Optional Popup Authentication
request_connect_timeout Request Connect Timeout (s) string True True False
request_read_timeout Request Read Timeout (s) string True True False

Transform Meta Info

Information Value
Display Name To Website Title
Owner Paterva
Author AndrewW
Data Source
Transform Name WebsiteToWebTitle_Mech
Short Description Fetches title from a given website. Looks for HTTP and simple JS redirects.
Input Entities maltego.Website
Output Entities maltego.WebTitle

To URLs [show Search Engine results]

Description

This transform just dumps the URLs collected.

Transform Meta Info

Information Value
Display Name To URLs [show Search Engine results]
Owner Paterva
Author Paterva
Data Source show Search Engine results
Transform Name WebsiteToURL_Expand
Short Description This transform just dumps the URLs collected.
Input Entities maltego.Website
Output Entities maltego.URL

Description

This transform uses a website mirror to spider the site and extract links.

Transform Meta Info

Information Value
Display Name Mirror: External links found
Owner Paterva
Author Paterva
Data Source
Transform Name WebsiteToWebsite_Mirror
Short Description This transform uses a website mirror to spider the site and extract links.
Input Entities maltego.Website
Output Entities maltego.Phrase

Did you find it helpful? Yes No

Send feedback
Sorry we couldn't be helpful. Help us improve this article with your feedback.