Release Notes - Standard Transforms Add-on (CTAS) Server

Version 3.2.0 - Standard Transforms Add-on (CTAS) Server

Release date: 27 March 2023

Welcome to the 3.2.0 Release of our Maltego Standard Transforms Add-on (CTAS) Server. Some of the key highlights include:

Added

Transforms

• IPQS Transforms. 
• MST Security Trails Transforms. 
• WHOISXML IP Netblock Transforms. 
• Shodan Internet DB Transforms 

Note: IPQS, Security Trails, WhoisXML, and IP Netblocks all require API Keys. Please refer to the API Keys section here.

Entities 

• Standard Entities

Removed

Transforms 

• FlickrAccountGetFriends  
• toAliasFromTwitterAccount  
• AffTwitterToLocation  
• AffTwitterToPerson   
• toSitesIdentifier  
• WebsiteToWebsite_Thumb 
• Robtex Transforms
  • ASNumberToCompany 
  • ASNumberToNetblocks 
  • DomainToDomain_TLD 
  • IPAddressToDNSName_SharedIP 
  • IPAddressToDomain_SharedMX 
  • IPAddressToDomain_SharedNS 
  • IPAddressToNetblock_NS4block 
  • IPAddressToNetblock_SS 
  • MXRecordToDomain_SharedMX 
  • NetblockToAS_SS 
  • NetblockToDNSName_SS 
  • NSrecordToDomain_SharedNS 
  • NSrecordToNetblock_NS4block

Updates to Machines

• Company Stalker 
  • Removed Email To Flickr Account Transform 
  • Removed Email To My Space Account Transform 
• Person - Email Address 
  • Removed Person to Email Address Common Transform 
• URL To Network and Domain Information 
  • Removed Netblock to AS Transform

Removed Machines

• Footprint L1
• Footprint L2
• Footprint L3
• Footprint XXL 

Updated

Transforms

• All related application dependencies.
• Updated Paterva references to Maltego Technologies 
• All Transforms updated with an onprem namespace and [On Premise] display prefix. Refer to the Screenshots section.  
• DNS To IP Address [DNS] Transform return IPv6 addresses.

Machines 

• All Machines have been updated with an "onprem" namespace and [On Premise] display prefix. Refer to Screenshots section.  

Server Components

• Django updated from 4.0.1 to 4.1.7
• Postgres updated from 10 to 13

Shared API Key Configuration

• Shared API Keys to be set in API Keys JSON file. The method of setting API keys as environment variables is no longer supported.

Fixes

• 100% CPU Usage for PGP, Wikimedia, Builtwith, MST-HTTP, MST-PROPS Transform Servers

Known Issues

• Robtex Transforms are not functional as the API is not responsive.  
• IMPORTANT: As all Transform names have been updated, custom Machines will need to be updated with the new prefix .onprem. Custom Machines with the old names will not work any longer. 

Screenshots

Figure 1 Transform Run Context 

Figure 2 Machine Manager 

Figure 3 All Transforms Listing 

Version 3.1.4 - Standard Transforms Add-on (CTAS) Server

Release date: 12 October 2022

• FIXED: Increased password length requirement to 9 characters. 
• FIXED: Set cookies header includes secure attribute. 
• FIXED: Frame-ancestors policy added to the CSP headers.

Version 3.1.3 - Standard Transforms Add-on (CTAS) Server

• FIXED: Issue with 100% CPU usage - replace async with on-demand logic.

Standard Transforms Add-on (CTAS) Server 3.1.3 OVA File Checksums

Version 3.1.2 - Standard Transforms Add-on (CTAS) Server

• UPDATED: Updated to Django 4.
• UPDATED: All related application dependencies.
• FIXED: Issue with runner not honoring custom port.
• UPDATED: NGINX configuration hardened (CSP, HSTS headers added and stricter TLS requirement).

Standard Transforms Add-on (CTAS) Server 3.1.2 OVA File Checksums

Version 3.1.0 - Standard Transforms Add-on (CTAS) Server

• ADDED: Moved all secrets to environmental variables that can be set from the docker-compose file.
• ADDED: Decoupled Python and Nginx into separate containers to comply with best-practice of having one process per container.
• ADDED: Created least-privileged user for each container to run with.
• ADDED: Updated networking configuration to support K8s networking.
• ADDED: Updated API key sharing mechanism so that API keys can be set from environmental variables.
• REMOVED: Admin UI for configuring API keys.
• ADDED: Changed the build process for registering Transforms with the dispatcher to ensure no runtime dependency issues.
• REMOVED: CTAS PGP Transforms.
• REMOVED: CTAS BuiltWith Transforms.
• REMOVED: CTAS Wikipedia Transforms.
• ADDED: JINX PGP Transforms.
• ADDED: JINX BuiltWith Transforms.
• ADDED: JINX Wikipedia Transforms.

Standard Transforms Add-on (CTAS) Server 3.0.X to 3.1.X OVA File Checksums