Overview
Maltego's Paterva CTAS Transforms are provided to Maltego users as part of the Maltego Standard Transforms which any Maltego Desktop Client has access to. The Maltego Standard Transforms support a vast variety of investigative tasks, including network footprinting, social media investigations, digital forensics, enriching threat intelligence, analyzing web content and more. They can be used on their own to conduct investigations, or supplement other specialized integrations available in the Transform Hub.
For more information about Maltego Standard Transforms click here
To Friends [Get Flickr Friends]
Description
Enumerate friends of a specific flickr user.
| Display Name |
To Friends [Get Flickr Friends] |
| Owner |
Paterva |
| Author |
AndrewW |
| Data Source |
Get Flickr Friends |
| Transform Name |
FlickrAccountGetFriends |
| Short Description |
Enumerate friends of a specific flickr user. |
| Input Entities |
maltego.affiliation.Flickr |
| Output Entities |
maltego.affiliation.Flickr |
To Alias
| Display Name |
To Alias |
| Owner |
Paterva |
| Author |
AndrewW |
| Data Source |
|
| Transform Name |
toAliasFromTwitterAccount |
| Short Description |
|
| Input Entities |
maltego.affiliation.Twitter |
| Output Entities |
maltego.Alias |
To Location [From Bio]
Description
Extract the location from a Twitter affiliations bio.
| Display Name |
To Location [From Bio] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
From Bio |
| Transform Name |
AffTwitterToLocation |
| Short Description |
Extract the location from a Twitter affiliations bio. |
| Input Entities |
maltego.affiliation.Twitter |
| Output Entities |
maltego.Location |
To Person [Convert]
Description
This transform will convert the Affiliation to a person, with the alias in the ‘additional’ field
| Display Name |
To Person [Convert] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
Convert |
| Transform Name |
AffTwitterToPerson |
| Short Description |
This transform will convert the Affiliation to a person, with the alias in the ‘additional’ field |
| Input Entities |
maltego.affiliation.Twitter |
| Output Entities |
maltego.Person |
To Social Account [Using NameChk]
Description
This transform will query NameChk.com for social accounts with the given alias.
| NameChkApi |
Namecheck API Key |
string |
|
True |
True |
False |
| Display Name |
To Social Account [Using NameChk] |
| Owner |
Paterva |
| Author |
AndrewW |
| Data Source |
Using NameChk |
| Transform Name |
namechk |
| Short Description |
This transform will query NameChk.com for social accounts with the given alias. |
| Input Entities |
maltego.Alias |
| Output Entities |
maltego.Alias |
To DNS Name [From DynDNS username]
Description
Looks up an alias against a list of dyndns domains.
| Display Name |
To DNS Name [From DynDNS username] |
| Owner |
Paterva |
| Author |
AndrewW |
| Data Source |
From DynDNS username |
| Transform Name |
toDynDNSNames |
| Short Description |
Looks up an alias against a list of dyndns domains. |
| Input Entities |
maltego.Alias |
| Output Entities |
maltego.DNSName |
To Phrase [Change Entity Type]
Description
Converts an Alias to a phrase entity.
| Display Name |
To Phrase [Change Entity Type] |
| Owner |
Paterva |
| Author |
AndrewW |
| Data Source |
Change Entity Type |
| Transform Name |
convertToPhrase |
| Short Description |
Converts an Alias to a phrase entity. |
| Input Entities |
maltego.Alias |
| Output Entities |
maltego.Phrase |
To DNS Name [Enumerate hostname numerically]
Description
Enumerates hostnames numerically. E.g. mail1.paterva.com would try mail2., mail3.
| autoPadding |
Auto Padding |
boolean |
True |
True |
True |
False |
| padding |
Padding |
int |
0 |
True |
True |
False |
| rangeEnd |
Range End |
int |
9 |
True |
True |
False |
| rangeStart |
Range Start |
int |
1 |
True |
True |
False |
| Display Name |
To DNS Name [Enumerate hostname numerically] |
| Owner |
Paterva |
| Author |
AndrewW |
| Data Source |
Enumerate hostname numerically |
| Transform Name |
enumerateHostNamesNumerically |
| Short Description |
Enumerates hostnames numerically. E.g. mail1.paterva.com would try mail2., mail3. |
| Input Entities |
maltego.DNSName |
| Output Entities |
maltego.DNSName |
To Domains [DNS]
| Display Name |
To Domains [DNS] |
| Owner |
Paterva |
| Author |
AndrewW |
| Data Source |
DNS |
| Output Entities |
maltego.Domain |
Variants
| DNSNameToDomain_DNS |
This transform extracts all the domains from a DNS Name - it excludes TLDs and SLD. |
maltego.DNSName |
| DomainToDomain_Sub |
This transform extracts all the domains from a domain name - it excludes TLDs and SLD. |
maltego.Domain |
To IP Address [DNS]
Description
This transform resolves a DNS name to an IP address using plain old DNS
| Display Name |
To IP Address [DNS] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
DNS |
| Transform Name |
DNSNameToIPAddress_DNS |
| Short Description |
This transform resolves a DNS name to an IP address using plain old DNS |
| Input Entities |
maltego.DNSName |
| Output Entities |
maltego.IPv4Address |
To Web site [Query ports]
Description
This transform detemines if a DNS Name is a Web Site by checking for responsive HTTP(s) ports.
| http_ports |
HTTP Query Ports |
string |
[‘80’] |
True |
True |
False |
| https_ports |
HTTPS Query Ports |
string |
[‘443’] |
True |
True |
False |
| timeout |
HTTP timeout (ms) |
int |
8000 |
True |
True |
False |
| Display Name |
To Web site [Query ports] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
Query ports |
| Transform Name |
DNSNameToWebsite_QueryPorts |
| Short Description |
This transform detemines if a DNS Name is a Web Site by checking for responsive HTTP(s) ports. |
| Input Entities |
maltego.DNSName |
| Output Entities |
maltego.Website |
To Entities [IBM Watson]
| companies_to_ignore |
Companies To Ignore |
string |
[‘icann’, ‘google’, ‘microsoft’, ‘ibm’, ‘facebook’, ‘twitter’, ‘adobe’, ‘creative commons’, ‘hp’, ‘yahoo’, ‘amazon’, ‘youtube’, ‘apple’, ‘ebay’, ‘paypal’] |
True |
True |
False |
| Display Name |
To Entities [IBM Watson] |
| Owner |
Paterva |
| Author |
PR |
| Data Source |
IBM Watson |
Variants
| DocumentToEntities |
This transform extracts named entities (person, company etc) from the document. |
maltego.Document |
maltego.Person,maltego.EmailAddress,maltego.Phrase,maltego.Document |
| toEntitiesNERTwitter |
Extracts named entities using IBM Watson. |
maltego.Twit |
maltego.Phrase |
| URLToPerson_NLP |
This transform uses Natural Language Processing (NLP/NER) to extract entities |
maltego.URL |
maltego.Phrase |
Description
This transform extracts the meta information from the document and then parses it for username (persons) and/or email addresses.
| Display Name |
Parse meta information |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
|
| Transform Name |
DocumentToPersonEmail_Meta |
| Short Description |
This transform extracts the meta information from the document and then parses it for username (persons) and/or email addresses. |
| Input Entities |
maltego.Document |
| Output Entities |
maltego.Person,maltego.EmailAddress,maltego.Phrase,maltego.Document |
To URL [Show SE results]
Description
This transform just dumps the URL of the Document for further use.
| Display Name |
To URL [Show SE results] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
Show SE results |
| Transform Name |
DocumentToURL_Dump |
| Short Description |
This transform just dumps the URL of the Document for further use. |
| Input Entities |
maltego.Document |
| Output Entities |
maltego.URL |
To DNS Name [Using Name Schema dictionary]
Description
This transform will try test various name schema’s against a domain.
| testDepth |
Test depth for Name Schema Files |
int |
4 |
True |
True |
False |
| Display Name |
To DNS Name [Using Name Schema dictionary] |
| Owner |
Paterva |
| Author |
AndrewW |
| Data Source |
Using Name Schema dictionary |
| Transform Name |
DomainToDNSNameSchema |
| Short Description |
This transform will try test various name schema’s against a domain. |
| Input Entities |
maltego.Domain |
| Output Entities |
maltego.DNSName |
To DNS Name [Find common DNS names]
Description
This transform will try to discover various common DNS Names in a domain.
| brutelist |
DNS Names to test |
string |
mail,mx,ns,ftp,webmail,web,gateway,secure,intranet,extranet,smtp,pop,ns1,mx1,email,admin,dmz,blog,dns,forum,ntp,pub,route,sql,ssh,webaccess,xml,imap, |
True |
True |
False |
| Display Name |
To DNS Name [Find common DNS names] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
Find common DNS names |
| Transform Name |
DomainToDNSName_DNSBrute |
| Short Description |
This transform will try to discover various common DNS Names in a domain. |
| Input Entities |
maltego.Domain |
| Output Entities |
maltego.DNSName |
To DNS Name [Attempt zone transfer]
Description
This transform will attempt to perform a zone transfer a returns A and Cname records
| ss_to |
Timeout (seconds) |
int |
8 |
True |
True |
False |
| Display Name |
To DNS Name [Attempt zone transfer] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
Attempt zone transfer |
| Transform Name |
DomainToDNSName_ZT |
| Short Description |
This transform will attempt to perform a zone transfer a returns A and Cname records |
| Input Entities |
maltego.Domain |
| Output Entities |
maltego.DNSName |
To Files (Interesting) [using Search Engine]
| HTTP_Timeout |
HTTP timeout (ms) |
int |
8000 |
True |
True |
False |
| extensions |
Search Extension [extension:priority] |
string |
[‘sql:100’, ‘zip:90’, ‘csv:90’, ‘tgz:90’, ‘bak:90’, ‘old:90’, ‘wav:20’, ‘mp3:20’, ‘exe:20’, ‘txt:20’] |
True |
True |
False |
| Display Name |
To Files (Interesting) [using Search Engine] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
using Search Engine |
| Output Entities |
maltego.Document |
Variants
| DomainToDocumentOther_SE |
Search for interesting files hosted on this domain. |
maltego.Domain |
| PhraseToDocumentOthers_SE |
This transform will search for the given phrase and show interesting files contaning the term. |
maltego.Phrase |
To Files (Office) [using Search Engine]
| HTTP_Timeout |
HTTP timeout (ms) |
int |
8000 |
True |
True |
False |
| extensions |
Search Extension [extension:priority] |
string |
[‘xls:100’, ‘xlsx:100’, ‘csv:100’, ‘doc:70’, ‘docx:70’, ‘ppt:40’, ‘pptx:40’, ‘mdb:40’, ‘pdf:40’] |
True |
True |
False |
| Display Name |
To Files (Office) [using Search Engine] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
using Search Engine |
| Output Entities |
maltego.Document |
Variants
| DomainToDocument_SE |
Search for office documents hosted on this domain. |
maltego.Domain |
| PhraseToDocument_SE |
This transform will search for the given phrase and show documents (Office[tm]) containing the term. |
maltego.Phrase |
To Emails @domain [using Search Engine]
Description
Search for emails containing the domain.
| HTTP_Timeout |
HTTP timeout (ms) |
int |
8000 |
True |
True |
False |
| Display Name |
To Emails @domain [using Search Engine] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
using Search Engine |
| Transform Name |
DomainToEmailAddress_AtDomain_SE |
| Short Description |
Search for emails containing the domain. |
| Input Entities |
maltego.Domain |
| Output Entities |
maltego.EmailAddress |
To Email addresses [using Search Engine]
Description
Search for related emails.
| HTTP_Timeout |
HTTP timeout (ms) |
int |
8000 |
True |
True |
False |
| Display Name |
To Email addresses [using Search Engine] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
using Search Engine |
| Transform Name |
DomainToEmailAddress_SE |
| Short Description |
Search for related emails. |
| Input Entities |
maltego.Domain |
| Output Entities |
maltego.EmailAddress |
To Email address [From whois info]
Description
This transform obtains whois information of the IP number, then parses it for email addresses.
| Display Name |
To Email address [From whois info] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
From whois info |
| Short Description |
This transform obtains whois information of the IP number, then parses it for email addresses. |
| Output Entities |
maltego.EmailAddress |
Variants
| DomainToEmailAddress_Whois |
maltego.Domain |
| IPAddressToEmailAddress_Whois |
maltego.IPv4Address |
To Entities from WHOIS [IBM Watson]
Description
This transform obtains whois information of the domain then parses it for entities using NER
| companies_to_ignore |
Companies To Ignore |
string |
[‘icann’, ‘google’, ‘microsoft’, ‘ibm’, ‘facebook’, ‘twitter’, ‘adobe’, ‘creative commons’, ‘hp’, ‘yahoo’, ‘amazon’, ‘youtube’, ‘apple’, ‘ebay’, ‘paypal’] |
True |
True |
False |
| Display Name |
To Entities from WHOIS [IBM Watson] |
| Owner |
John Doe |
| Author |
John Doe |
| Data Source |
IBM Watson |
| Transform Name |
DomainToEntities_Whois_NER |
| Short Description |
This transform obtains whois information of the domain then parses it for entities using NER |
| Input Entities |
maltego.Domain |
| Output Entities |
maltego.Phrase |
To DNS Name - MX (mail server)
Description
This transform will find the MX records (mail servers) of a domain.
| Display Name |
To DNS Name - MX (mail server) |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
|
| Transform Name |
DomainToMXrecord_DNS |
| Short Description |
This transform will find the MX records (mail servers) of a domain. |
| Input Entities |
maltego.Domain |
| Output Entities |
maltego.MXRecord |
To DNS Name - NS (name server)
Description
This transform will find the NS records (name servers) of a domain.
| Display Name |
To DNS Name - NS (name server) |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
|
| Transform Name |
DomainToNSrecord_DNS |
| Short Description |
This transform will find the NS records (name servers) of a domain. |
| Input Entities |
maltego.Domain |
| Output Entities |
maltego.NSRecord |
To Phone Numbers [using Search Engine]
Description
Search for related phone numbers.
| HTTP_Timeout |
HTTP timeout (ms) |
int |
8000 |
True |
True |
False |
| Display Name |
To Phone Numbers [using Search Engine] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
using Search Engine |
| Transform Name |
DomainToPhoneNumber_SE |
| Short Description |
Search for related phone numbers. |
| Input Entities |
maltego.Domain |
| Output Entities |
maltego.PhoneNumber |
To Phone numbers [From whois info]
Description
This transforms obtains whois information of the given domain, then parses it for telephone numbers.
| Display Name |
To Phone numbers [From whois info] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
From whois info |
| Transform Name |
DomainToPhone_Whois |
| Short Description |
This transforms obtains whois information of the given domain, then parses it for telephone numbers. |
| Input Entities |
maltego.Domain |
| Output Entities |
maltego.PhoneNumber |
To DNS Name - SOA (Start of Authority)
Description
Extracts information for this domain from the SOA record.
| Display Name |
To DNS Name - SOA (Start of Authority) |
| Owner |
Paterva |
| Author |
AndrewW |
| Data Source |
|
| Transform Name |
DomainToSOAInformation |
| Short Description |
Extracts information for this domain from the SOA record. |
| Input Entities |
maltego.Domain |
| Output Entities |
maltego.NSRecord, maltego.EmailAddress |
To DNS Name - SPF (sender policy framework)
Description
Extracts information for this domain from the SPF (txt) record.
| Display Name |
To DNS Name - SPF (sender policy framework) |
| Owner |
Paterva |
| Author |
AndrewW |
| Data Source |
|
| Transform Name |
DomainToSPFInformation |
| Short Description |
Extracts information for this domain from the SPF (txt) record. |
| Input Entities |
maltego.Domain |
| Output Entities |
maltego.Netblock, maltego.IPv4Address, maltego.DNSName, maltego.MXRecord, maltego.DNSName, maltego.Domain |
To Website using domain [Bing]
Description
Search for websites that contain the domain.
| HTTP_Timeout |
HTTP timeout (ms) |
int |
8000 |
True |
True |
False |
| Display Name |
To Website using domain [Bing] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
Bing |
| Transform Name |
DomainToWebsiteDNS_SE |
| Short Description |
Search for websites that contain the domain. |
| Input Entities |
maltego.Domain |
| Output Entities |
maltego.Website |
To Website [Quick lookup]
Description
This transform will check to see if there is a www.DOMAIN entry. Useful when used in bulk.
| Display Name |
To Website [Quick lookup] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
Quick lookup |
| Transform Name |
DomainToWebsite_DNS |
| Short Description |
This transform will check to see if there is a www.DOMAIN entry. Useful when used in bulk. |
| Input Entities |
maltego.Domain |
| Output Entities |
maltego.Website |
To Website mentioning domain [Bing]
Description
Search for websites mentioning the domain in their content.
| HTTP_Timeout |
HTTP timeout (ms) |
int |
8000 |
True |
True |
False |
| Display Name |
To Website mentioning domain [Bing] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
Bing |
| Transform Name |
DomainToWebsite_SE |
| Short Description |
Search for websites mentioning the domain in their content. |
| Input Entities |
maltego.Domain |
| Output Entities |
maltego.Website |
To Website [using Search Engine]
| HTTP_Timeout |
HTTP timeout (ms) |
int |
8000 |
True |
True |
False |
| Display Name |
To Website [using Search Engine] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
using Search Engine |
| Output Entities |
maltego.Website |
Variants
| EmailAddressToDNSName_SE |
Search for websites that mention the email. |
maltego.EmailAddress |
| PhoneNumberToWebsite_SE |
This transform searches for the telephone number and returns related sites. |
maltego.PhoneNumber |
| PhraseToWebsite_SE |
This transform will search for the given phrase and show the sites where the phrase occurs. |
maltego.Phrase |
To Domain [DNS]
Description
This transform will remove the part in front of the @ sign of the given address.
| Display Name |
To Domain [DNS] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
DNS |
| Transform Name |
EmailAddressToDomain_DNS |
| Short Description |
This transform will remove the part in front of the @ sign of the given address. |
| Input Entities |
maltego.EmailAddress |
| Output Entities |
maltego.Domain |
To Email Addresses [using Search Engine]
| HTTP_Timeout |
HTTP timeout (ms) |
int |
8000 |
True |
True |
False |
| Display Name |
To Email Addresses [using Search Engine] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
using Search Engine |
| Output Entities |
maltego.EmailAddress |
Variants
| EmailAddressToEmailAddress_SE |
This transform will search for the email address and show related email addresses. |
maltego.EmailAddress |
| PhraseToEmailAddress_SE |
This transform will search for the phrase and show related email addresses. |
maltego.Phrase |
Verify email address exists [SMTP]
Description
This transform simply connects to the relevant mail server and checks to see if the email address exists. The results are passed back in the same entity - as a label.
| Display Name |
Verify email address exists [SMTP] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
SMTP |
| Transform Name |
EmailAddressToEmailAddress_Verify |
| Short Description |
This transform simply connects to the relevant mail server and checks to see if the email address exists. The results are passed back in the same entity - as a label. |
| Input Entities |
maltego.EmailAddress |
| Output Entities |
maltego.EmailAddress |
To Person [Parse separator]
Description
This transform tries to figure out if it can parse the email address to a person’s name using separators
| format |
Format (FL-firstnamelastname,LF-lastnamefirstname) |
string |
FL |
True |
True |
False |
| Display Name |
To Person [Parse separator] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
Parse separator |
| Transform Name |
EmailAddressToPerson_Parse |
| Short Description |
This transform tries to figure out if it can parse the email address to a person’s name using separators |
| Input Entities |
maltego.EmailAddress |
| Output Entities |
maltego.Person |
To Phone number [using Search Engine]
Description
This transform will search for the given email address and show the related telephone numbers.
| HTTP_Timeout |
HTTP timeout (ms) |
int |
8000 |
True |
True |
False |
| Display Name |
To Phone number [using Search Engine] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
using Search Engine |
| Transform Name |
EmailAddressToPhoneNumber_SE |
| Short Description |
This transform will search for the given email address and show the related telephone numbers. |
| Input Entities |
maltego.EmailAddress |
| Output Entities |
maltego.PhoneNumber |
To URLs [Show Search Engine results]
Description
This transform just dumps the URLs collected from the search engine.
| Display Name |
To URLs [Show Search Engine results] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
Show Search Engine results |
| Short Description |
This transform just dumps the URLs collected from the search engine. |
| Output Entities |
maltego.URL |
Variants
| EmailAddressToURL_Expand |
maltego.EmailAddress |
| PhoneNumberToURL_Expand |
maltego.PhoneNumber |
To Flickr Account
Description
Looks up an email address on flickr and returns account details.
| Display Name |
To Flickr Account |
| Owner |
Paterva |
| Author |
AndrewW |
| Data Source |
|
| Transform Name |
emailToFlickrAccount |
| Short Description |
Looks up an email address on flickr and returns account details. |
| Input Entities |
maltego.EmailAddress |
| Output Entities |
maltego.affiliation.Flickr |
To Myspace Account
Description
Looks up an email address on myspace and returns account details.
| Display Name |
To Myspace Account |
| Owner |
Paterva |
| Author |
AndrewW |
| Data Source |
|
| Transform Name |
emailToMyspaceAccount |
| Short Description |
Looks up an email address on myspace and returns account details. |
| Input Entities |
maltego.EmailAddress |
| Output Entities |
maltego.affiliation.Myspace, maltego.Alias |
To Circular Area
| areaRoundValue |
Radius of Area in m |
int |
1000 |
True |
True |
False |
| Display Name |
To Circular Area |
| Owner |
Paterva |
| Author |
AndrewW |
| Data Source |
|
| Transform Name |
ToArea |
| Short Description |
|
| Input Entities |
maltego.GPS |
| Output Entities |
maltego.CircularArea |
To Location [Using nominatim.openstreetmap.org]
Description
Takes GPS Co-ordinates to an address via nominatim.openstreetmap.org
| Display Name |
To Location [Using nominatim.openstreetmap.org] |
| Owner |
Paterva |
| Author |
AndrewW |
| Data Source |
Using nominatim.openstreetmap.org |
| Transform Name |
toLocationGeoCode |
| Short Description |
Takes GPS Co-ordinates to an address via nominatim.openstreetmap.org |
| Input Entities |
maltego.GPS |
| Output Entities |
maltego.Location |
To Location (broad) [Using nominatim.openstreetmap.org]
Description
Takes GPS Co-ordinates to an broader address via nominatim.openstreetmap.org
| Display Name |
To Location (broad) [Using nominatim.openstreetmap.org] |
| Owner |
Paterva |
| Author |
AndrewW |
| Data Source |
Using nominatim.openstreetmap.org |
| Transform Name |
toLocationGeoCodeBroad |
| Short Description |
Takes GPS Co-ordinates to an broader address via nominatim.openstreetmap.org |
| Input Entities |
maltego.GPS |
| Output Entities |
maltego.Location |
To Website using IP: [Bing]
Description
Search for websites that have been hosted on this IP.
| HTTP_Timeout |
HTTP timeout (ms) |
int |
8000 |
True |
True |
False |
| Display Name |
To Website using IP: [Bing] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
Bing |
| Transform Name |
IPAddressToDNSNameBing_SE |
| Short Description |
Search for websites that have been hosted on this IP. |
| Input Entities |
maltego.IPv4Address |
| Output Entities |
maltego.Website |
To DNS Name [Reverse DNS]
Description
This transform reverse resolves an IP address to a DNS name using plain old DNS
| Display Name |
To DNS Name [Reverse DNS] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
Reverse DNS |
| Transform Name |
IPAddressToDNSName_DNS |
| Short Description |
This transform reverse resolves an IP address to a DNS name using plain old DNS |
| Input Entities |
maltego.IPv4Address |
| Output Entities |
maltego.DNSName |
To Entities From WHOIS [IBM Watson]
| companies_to_ignore |
Companies To Ignore |
string |
[‘icann’, ‘google’, ‘microsoft’, ‘ibm’, ‘facebook’, ‘twitter’, ‘adobe’, ‘creative commons’, ‘hp’, ‘yahoo’, ‘amazon’, ‘youtube’, ‘apple’, ‘ebay’, ‘paypal’] |
True |
True |
False |
| Display Name |
To Entities From WHOIS [IBM Watson] |
| Owner |
|
| Author |
|
| Data Source |
IBM Watson |
| Output Entities |
maltego.Phrase |
Variants
| IPAddressToEntities_Whois_NER |
This transform obtains whois information of IP number, then parses it for entities using NER |
maltego.IPv4Address |
| NetblockToEntities_NER_Whois |
This transform obtains whois information of netblock (well the first IP in the block), then parses it for entities using NER |
maltego.Netblock |
To Netblock [Using natural boundaries]
Description
This transform will carve a netblock from an IP - counting a certain number of IPs up and down.
| cutsize |
Block Size |
int |
256 |
True |
True |
False |
| Display Name |
To Netblock [Using natural boundaries] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
Using natural boundaries |
| Transform Name |
IPAddressToNetblock_Cuts |
| Short Description |
This transform will carve a netblock from an IP - counting a certain number of IPs up and down. |
| Input Entities |
maltego.IPv4Address |
| Output Entities |
maltego.Netblock |
To Netblock [Blocks delegated to this IP as NS]
Description
This transform will contact Robtex and determine if the IP number has any reverse DNS netblocks has been delegated to it.
| rt_to |
Robtex HTTP timeout (ms) |
int |
25000 |
True |
True |
False |
| Display Name |
To Netblock [Blocks delegated to this IP as NS] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
Blocks delegated to this IP as NS |
| Transform Name |
IPAddressToNetblock_NS4block |
| Short Description |
This transform will contact Robtex and determine if the IP number has any reverse DNS netblocks has been delegated to it. |
| Input Entities |
maltego.IPv4Address |
| Output Entities |
maltego.Netblock |
To Netblock [Using whois info]
Description
This transform will get the netblock via the whois service (ARIN/APNIC/LACNIC/AFRINIC/RIPE)
| Display Name |
To Netblock [Using whois info] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
Using whois info |
| Transform Name |
IPAddressToNetblock_whois |
| Short Description |
This transform will get the netblock via the whois service (ARIN/APNIC/LACNIC/AFRINIC/RIPE) |
| Input Entities |
maltego.IPv4Address |
| Output Entities |
maltego.Netblock |
To Phone number [From whois info]
Description
Transforms obtains whois information of IP number, then parses it for telephone numbers
| Display Name |
To Phone number [From whois info] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
From whois info |
| Transform Name |
IPAddressToPhone_Whois |
| Short Description |
Transforms obtains whois information of IP number, then parses it for telephone numbers |
| Input Entities |
maltego.IPv4Address |
| Output Entities |
maltego.PhoneNumber |
To Website mentioning IP [Bing]
Description
Find websites containing the IP.
| HTTP_Timeout |
HTTP timeout (ms) |
int |
8000 |
True |
True |
False |
| Display Name |
To Website mentioning IP [Bing] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
Bing |
| Transform Name |
IPAddressToWebsite_SE |
| Short Description |
Find websites containing the IP. |
| Input Entities |
maltego.IPv4Address |
| Output Entities |
maltego.Website |
To Location [city, country]
| language |
Country Language |
string |
en |
True |
True |
False |
| Display Name |
To Location [city, country] |
| Owner |
Paterva |
| Author |
AndrewW |
| Data Source |
city, country |
| Output Entities |
maltego.Location |
Variants
| toLocation |
This transform takes an IP address to a location with the MaxMind free city database. |
maltego.IPv4Address |
| toLocationNetblock |
This transform takes an netblock to a location with the MaxMind free city database. |
maltego.Netblock |
To Location [country]
| language |
Country Language |
string |
en |
True |
True |
False |
| Display Name |
To Location [country] |
| Owner |
Paterva |
| Author |
AndrewW |
| Data Source |
country |
| Output Entities |
maltego.Location |
Variants
| toLocationCountry |
This transform takes an IP address to a location with the MaxMind free city database. |
maltego.IPv4Address |
| toLocationCountryNetblock |
This transform takes a Netblock to a location with the MaxMind free city database. |
maltego.Netblock |
To IP addresses [Found in Netblock]
Description
Converts Netblock to IPs within that netblock.
| Display Name |
To IP addresses [Found in Netblock] |
| Owner |
Paterva |
| Author |
AndrewW |
| Data Source |
Found in Netblock |
| Transform Name |
NetblockToIPs |
| Short Description |
Converts Netblock to IPs within that netblock. |
| Input Entities |
maltego.Netblock |
| Output Entities |
maltego.IPv4Address |
To Netblocks [Cuts Netblock into smaller ones]
Description
Converts Netblock to smaller Netblocks.
| netblockSize |
Netblock size |
string |
|
True |
True |
False |
| Display Name |
To Netblocks [Cuts Netblock into smaller ones] |
| Owner |
Paterva |
| Author |
AndrewW |
| Data Source |
Cuts Netblock into smaller ones |
| Transform Name |
NetblockToNetblocks |
| Short Description |
Converts Netblock to smaller Netblocks. |
| Input Entities |
maltego.Netblock |
| Output Entities |
maltego.Netblock |
To EmailAddress [Bing]
Description
Search for possible email addresses.
| HTTP_Timeout |
HTTP timeout (ms) |
int |
8000 |
True |
True |
False |
| additional |
Additional term (space=none) |
string |
|
True |
True |
False |
| site |
Domain/TLD (space=none) |
string |
|
True |
True |
False |
| Display Name |
To EmailAddress [Bing] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
Bing |
| Transform Name |
PersonToEmailAddress_SE |
| Short Description |
Search for possible email addresses. |
| Input Entities |
maltego.Person |
| Output Entities |
maltego.EmailAddress |
To PhoneNumber [Bing]
Description
Search for possible phone numbers.
| HTTP_Timeout |
HTTP timeout (ms) |
int |
8000 |
True |
True |
False |
| additional |
Additional term (space=none) |
string |
|
True |
True |
False |
| site |
Domain/TLD (space=none) |
string |
|
True |
True |
False |
| Display Name |
To PhoneNumber [Bing] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
Bing |
| Transform Name |
PersonToPhoneNumber_SE |
| Short Description |
Search for possible phone numbers. |
| Input Entities |
maltego.Person |
| Output Entities |
maltego.Website |
To Website [Bing]
Description
This transform shows sites where a permutation of the person’s name was found.
| HTTP_Timeout |
HTTP timeout (ms) |
int |
8000 |
True |
True |
False |
| additional |
Additional term (space=none) |
string |
|
True |
True |
False |
| site |
Domain/TLD (space=none) |
string |
|
True |
True |
False |
| Display Name |
To Website [Bing] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
Bing |
| Transform Name |
PersonToWebsite_SE |
| Short Description |
This transform shows sites where a permutation of the person’s name was found. |
| Input Entities |
maltego.Person |
| Output Entities |
maltego.Website |
To Email Address [using Search Engine]
Description
This transform searches for the telephone number and returns related email addresses.
| HTTP_Timeout |
HTTP timeout (ms) |
int |
8000 |
True |
True |
False |
| Display Name |
To Email Address [using Search Engine] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
using Search Engine |
| Transform Name |
PhoneNumberToEmailAddress_SE |
| Short Description |
This transform searches for the telephone number and returns related email addresses. |
| Input Entities |
maltego.PhoneNumber |
| Output Entities |
maltego.EmailAddress |
To Phone Number [using Search Engine]
Description
This transform searches for the telephone number and returns related telephone numbers.
| HTTP_Timeout |
HTTP timeout (ms) |
int |
8000 |
True |
True |
False |
| Display Name |
To Phone Number [using Search Engine] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
using Search Engine |
| Transform Name |
PhoneNumberToPhoneNumber_SE |
| Short Description |
This transform searches for the telephone number and returns related telephone numbers. |
| Input Entities |
maltego.PhoneNumber |
| Output Entities |
maltego.PhoneNumber |
To Telephone numbers [using Search Engine]
Description
This transform will search for the phrase and shows the related telephone numbers.
| HTTP_Timeout |
HTTP timeout (ms) |
int |
8000 |
True |
True |
False |
| exact_match |
Exact Match |
boolean |
False |
True |
True |
False |
| Display Name |
To Telephone numbers [using Search Engine] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
using Search Engine |
| Transform Name |
PhraseToPhoneNumber_SE |
| Short Description |
This transform will search for the phrase and shows the related telephone numbers. |
| Input Entities |
maltego.Phrase |
| Output Entities |
maltego.PhoneNumber |
To Websites - specifics (pastebin) [using SE]
Description
This transform will search for the given phrase and show the sites where the phrase occurs.
| HTTP_Timeout |
HTTP timeout (ms) |
int |
8000 |
True |
True |
False |
| exact_match |
Exact Match |
boolean |
False |
True |
True |
False |
| sitelist |
Site List |
string |
[‘pastie.org’, ‘pastebin.com’, ‘pastebin.ca’] |
True |
True |
False |
| Display Name |
To Websites - specifics (pastebin) [using SE] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
using SE |
| Transform Name |
PhraseToSpecificSites_SE |
| Short Description |
This transform will search for the given phrase and show the sites where the phrase occurs. |
| Input Entities |
maltego.Phrase |
| Output Entities |
maltego.Website |
Description
The transform will extract aliases from a tweet.
| Display Name |
To Aliases [mentioned in Tweet] |
| Owner |
Paterva |
| Author |
AndrewW |
| Data Source |
mentioned in Tweet |
| Transform Name |
pullAliases |
| Short Description |
The transform will extract aliases from a tweet. |
| Input Entities |
maltego.Twit |
| Output Entities |
maltego.Alias |
Description
Simply splits tweet into words and pulls the hashtag.
| IgnoreHashes |
Hashes to ignore. |
string |
|
True |
True |
False |
| Display Name |
To Hash Tags |
| Owner |
Paterva |
| Author |
AndrewW |
| Data Source |
|
| Transform Name |
pullHashTags |
| Short Description |
Simply splits tweet into words and pulls the hashtag. |
| Input Entities |
maltego.Twit |
| Output Entities |
maltego.hashtag |
To Sentiment [IBM Watson]
Description
This transform will get a sentiment of a Tweet.
| companies_to_ignore |
Companies To Ignore |
string |
[‘icann’, ‘google’, ‘microsoft’, ‘ibm’, ‘facebook’, ‘twitter’, ‘adobe’, ‘creative commons’, ‘hp’, ‘yahoo’, ‘amazon’, ‘youtube’, ‘apple’, ‘ebay’, ‘paypal’] |
True |
True |
False |
| Display Name |
To Sentiment [IBM Watson] |
| Owner |
Paterva |
| Author |
PR |
| Data Source |
IBM Watson |
| Transform Name |
TweetSentiment |
| Short Description |
This transform will get a sentiment of a Tweet. |
| Input Entities |
maltego.Twit |
| Output Entities |
Phrase |
To Stock Symbol
Description
Simply splits tweet into words and pulls the stock symbols.
| IgnoreHashes |
Stocks to ignore. |
string |
|
True |
True |
False |
| Display Name |
To Stock Symbol |
| Owner |
Paterva |
| Author |
AndrewW |
| Data Source |
|
| Transform Name |
pullStockSymbol |
| Short Description |
Simply splits tweet into words and pulls the stock symbols. |
| Input Entities |
maltego.Twit |
| Output Entities |
maltego.StockSymbol |
Description
Try return URLs from tweets.
| expand_urls |
Expand URLs |
boolean |
True |
True |
True |
False |
| include_tweets |
Include Tweet Links |
boolean |
False |
True |
True |
False |
| Display Name |
To URLs [Extracts links from Tweet] |
| Owner |
Paterva |
| Author |
AndrewW |
| Data Source |
Extracts links from Tweet |
| Transform Name |
pullURLs |
| Short Description |
Try return URLs from tweets. |
| Input Entities |
maltego.Twit |
| Output Entities |
maltego.URL |
To Words [English]
| ignoreRT |
Ignore Retweets |
boolean |
True |
True |
True |
False |
| wordListDepth |
Word List Depth |
int |
3500 |
True |
True |
False |
| Display Name |
To Words [English] |
| Owner |
Paterva |
| Author |
AndrewW |
| Data Source |
English |
| Transform Name |
TweetToWords |
| Short Description |
|
| Input Entities |
maltego.Twit |
| Output Entities |
maltego.Phrase |
To Other Sites With Same Code
Description
This transform returns websites that use the same tracking code.
| spyonwebApi |
Spy on Web API |
string |
|
True |
True |
False |
| Display Name |
To Other Sites With Same Code |
| Owner |
Paterva |
| Author |
AndrewW |
| Data Source |
|
| Transform Name |
toSitesIdentifier |
| Short Description |
This transform returns websites that use the same tracking code. |
| Input Entities |
maltego.UniqueIdentifier |
| Output Entities |
maltego.Phrase |
To Email Addresses [Found on web page]
Description
This transform finds the email addresses on the URL
| HTTP_Timeout |
HTTP timeout (ms) |
int |
8000 |
True |
True |
False |
| Display Name |
To Email Addresses [Found on web page] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
Found on web page |
| Transform Name |
URLToEmail_Parse |
| Short Description |
This transform finds the email addresses on the URL |
| Input Entities |
maltego.URL |
| Output Entities |
maltego.EmailAddress |
To Phone numbers [Found on this web page]
Description
This transform finds the phone numbers on the URL
| Display Name |
To Phone numbers [Found on this web page] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
Found on this web page |
| Transform Name |
URLToPhoneNumber_Parse |
| Short Description |
This transform finds the phone numbers on the URL |
| Input Entities |
maltego.URL |
| Output Entities |
maltego.PhoneNumber |
URL to Title
Description
Fetches title from a given URL. Looks for HTTP and simple JS redirects.
| Display Name |
URL to Title |
| Owner |
Paterva |
| Author |
AndrewW |
| Data Source |
|
| Transform Name |
URLToTitle |
| Short Description |
Fetches title from a given URL. Looks for HTTP and simple JS redirects. |
| Input Entities |
maltego.URL |
| Output Entities |
maltego.WebTitle |
To Website [Convert]
Description
This transform converts an URL to a website
| Display Name |
To Website [Convert] |
| Owner |
Paterva |
| Author |
AndrewW |
| Data Source |
Convert |
| Transform Name |
URLToWebsite_Convert |
| Short Description |
This transform converts an URL to a website |
| Input Entities |
maltego.URL |
| Output Entities |
maltego.Website |
To Website [Links on this web page]
Description
This transform looks for outgoing links on the URL and show them as websites
| HTTP_Timeout |
HTTP timeout (ms) |
int |
8000 |
True |
True |
False |
| Display Name |
To Website [Links on this web page] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
Links on this web page |
| Transform Name |
URLToWebsite_Parse |
| Short Description |
This transform looks for outgoing links on the URL and show them as websites |
| Input Entities |
maltego.URL |
| Output Entities |
maltego.Website |
Mirror: Email addresses found
Description
This transform uses a website mirror to spider the site and extract email addresses
| Display Name |
Mirror: Email addresses found |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
|
| Transform Name |
WebsiteToEmailAddress_Mirror |
| Short Description |
This transform uses a website mirror to spider the site and extract email addresses |
| Input Entities |
maltego.Website |
| Output Entities |
maltego.EmailAddress |
To Website Title
Description
Fetches title from a given website. Looks for HTTP and simple JS redirects.
| request_connect_timeout |
Request Connect Timeout (s) |
string |
|
True |
True |
False |
| request_read_timeout |
Request Read Timeout (s) |
string |
|
True |
True |
False |
| Display Name |
To Website Title |
| Owner |
Paterva |
| Author |
AndrewW |
| Data Source |
|
| Transform Name |
WebsiteToWebTitle_Mech |
| Short Description |
Fetches title from a given website. Looks for HTTP and simple JS redirects. |
| Input Entities |
maltego.Website |
| Output Entities |
maltego.WebTitle |
To URLs [show Search Engine results]
Description
This transform just dumps the URLs collected.
| Display Name |
To URLs [show Search Engine results] |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
show Search Engine results |
| Transform Name |
WebsiteToURL_Expand |
| Short Description |
This transform just dumps the URLs collected. |
| Input Entities |
maltego.Website |
| Output Entities |
maltego.URL |
Mirror: External links found
Description
This transform uses a website mirror to spider the site and extract links.
| Display Name |
Mirror: External links found |
| Owner |
Paterva |
| Author |
Paterva |
| Data Source |
|
| Transform Name |
WebsiteToWebsite_Mirror |
| Short Description |
This transform uses a website mirror to spider the site and extract links. |
| Input Entities |
maltego.Website |
| Output Entities |
maltego.Phrase |