Overview
The Maltego Legacy Transforms provide the current and historic technologies which websites are built upon.
These Transforms are particularly useful for discovering relationships between websites and for retrieving the details on how these are related and the duration of the relation (e.g., IP's and tracking codes).
Maltego's Legacy Transforms are provided to Maltego users as part of the Maltego Standard Transforms which any Maltego Graph application has access to. The Maltego Standard Transforms support a vast variety of investigative tasks, including network footprinting, social media investigations, digital forensics, enriching threat intelligence, analyzing web content and more. They can be used on their own to conduct investigations, or supplement other specialized integrations available in the Data Hub.
For more information about Maltego Standard Transforms click here
To DNS Name [From DynDNS username]
Description
Looks up an alias against a list of dyndns domains.
| Display Name | To DNS Name [From DynDNS username] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | From DynDNS username |
| Transform Name | toDynDNSNames |
| Short Description | Looks up an alias against a list of dyndns domains. |
| Input Entities | maltego.Alias |
| Output Entities | maltego.DNSName |
To Phrase [Change Entity Type]
Description
Converts an Alias to a phrase Entity.
| Display Name | To Phrase [Change Entity Type] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | Change Entity Type |
| Transform Name | convertToPhrase |
| Short Description | Converts an Alias to a phrase entity. |
| Input Entities | maltego.Alias |
| Output Entities | maltego.Phrase |
To DNS Name [Enumerate hostname numerically]
Description
Enumerates hostnames numerically. E.g. mail1.maltego.com would try mail2., mail3.
| autoPadding | Auto Padding | boolean | True | True | True | False |
| padding | Padding | int | 0 | True | True | False |
| rangeEnd | Range End | int | 9 | True | True | False |
| rangeStart | Range Start | int | 1 | True | True | False |
| Display Name | To DNS Name [Enumerate hostname numerically] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | Enumerate hostname numerically |
| Transform Name | enumerateHostNamesNumerically |
| Short Description | Enumerates hostnames numerically. E.g. mail1.maltego.com would try mail2., mail3. |
| Input Entities | maltego.DNSName |
| Output Entities | maltego.DNSName |
To Domains [DNS]
| Display Name | To Domains [DNS] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | DNS |
| Output Entities | maltego.Domain |
Variants
| DNSNameToDomain_DNS | This transform extracts all the domains from a DNS Name - it excludes TLDs and SLD. | maltego.DNSName |
| DomainToDomain_Sub | This transform extracts all the domains from a domain name - it excludes TLDs and SLD. | maltego.Domain |
To IP Address [DNS]
Description
This Transform resolves a DNS name to an IP address using plain DNS.
| Display Name | To IP Address [DNS] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | DNS |
| Transform Name | DNSNameToIPAddress_DNS |
| Short Description | This transform resolves a DNS name to an IP address using plain old DNS |
| Input Entities | maltego.DNSName |
| Output Entities | maltego.IPv4Address,maltego.IPv6Address |
To Web site [Query ports]
Description
This Transform detemines if a DNS Name is a Web Site by checking for responsive HTTP(s) ports.
| http_ports | HTTP Query Ports | string | [‘80’] | True | True | False |
| https_ports | HTTPS Query Ports | string | [‘443’] | True | True | False |
| timeout | HTTP timeout (ms) | int | 8000 | True | True | False |
| Display Name | To Web site [Query ports] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | Query ports |
| Transform Name | DNSNameToWebsite_QueryPorts |
| Short Description | This transform detemines if a DNS Name is a Web Site by checking for responsive HTTP(s) ports. |
| Input Entities | maltego.DNSName |
| Output Entities | maltego.Website |
To Entities [IBM Watson]
| companies_to_ignore | Companies To Ignore | string | [‘icann’, ‘google’, ‘microsoft’, ‘ibm’, ‘facebook’, ‘twitter’, ‘adobe’, ‘creative commons’, ‘hp’, ‘yahoo’, ‘amazon’, ‘youtube’, ‘apple’, ‘ebay’, ‘paypal’] | True | True | False |
| ibm_watson_api_key | IBM Watson Api Key | string | | True | True | False |
| ibm_watson_api_url | IBM Watson Api URL | string | | True | True | False |
| Display Name | To Entities [IBM Watson] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | IBM Watson |
Variants
| DocumentToEntities | This transform extracts named entities (person, company etc) from the document. | maltego.Document | maltego.Person,maltego.EmailAddress,maltego.Phrase,maltego.Document |
| toEntitiesNERTwitter | Extracts named entities using IBM Watson. | maltego.Twit | maltego.Phrase |
| URLToPerson_NLP | This transform uses Natural Language Processing (NLP/NER) to extract entities | maltego.URL | maltego.Phrase |
Description
This Transform extracts the meta information from the document and then parses it for username (persons) and/or email addresses.
| Display Name | Parse meta information |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | |
| Transform Name | DocumentToPersonEmail_Meta |
| Short Description | This transform extracts the meta information from the document and then parses it for username (persons) and/or email addresses. |
| Input Entities | maltego.Document |
| Output Entities | maltego.Person,maltego.EmailAddress,maltego.Phrase,maltego.Document |
To URL [Show SE results]
Description
This Transform dumps the URL of the Document for further use.
| Display Name | To URL [Show SE results] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | Show SE results |
| Transform Name | DocumentToURL_Dump |
| Short Description | This transform dumps the URL of the Document for further use. |
| Input Entities | maltego.Document |
| Output Entities | maltego.URL |
To DNS Name [Using Name Schema dictionary]
Description
This transform will try test various name schema’s against a domain.
| testDepth | Test depth for Name Schema Files | int | 4 | True | True | False |
| Display Name | To DNS Name [Using Name Schema dictionary] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | Using Name Schema dictionary |
| Transform Name | DomainToDNSNameSchema |
| Short Description | This transform will try test various name schema’s against a domain. |
| Input Entities | maltego.Domain |
| Output Entities | maltego.DNSName |
To DNS Name [Find common DNS names]
Description
This Transform attempts to discover various common DNS Names in a domain.
| brutelist | DNS Names to test | string | mail,mx,ns,ftp,webmail,web,gateway,secure,intranet,extranet,smtp,pop,ns1,mx1,email,admin,dmz,blog,dns,forum,ntp,pub,route,sql,ssh,webaccess,xml,imap, | True | True | False |
| Display Name | To DNS Name [Find common DNS names] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | Find common DNS names |
| Transform Name | DomainToDNSName_DNSBrute |
| Short Description | This transform will try to discover various common DNS Names in a domain. |
| Input Entities | maltego.Domain |
| Output Entities | maltego.DNSName |
To DNS Name [Attempt zone transfer]
Description
This Transform will attempt to perform a zone transfer a returns A and Cname records.
| ss_to | Timeout (seconds) | int | 8 | True | True | False |
| Display Name | To DNS Name [Attempt zone transfer] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | Attempt zone transfer |
| Transform Name | DomainToDNSName_ZT |
| Short Description | This transform will attempt to perform a zone transfer a returns A and Cname records |
| Input Entities | maltego.Domain |
| Output Entities | maltego.DNSName |
To Files (Interesting) [using Search Engine]
| HTTP_Timeout | HTTP timeout (ms) | int | 8000 | True | True | False |
| bing_search_service_api_key | Bing Search Api Key | string | | True | True | False |
| bing_search_service_api_url | Bing Search Api URL | string | | True | True | False |
| extensions | Search Extension [extension:priority] | string | [‘sql:100’, ‘zip:90’, ‘csv:90’, ‘tgz:90’, ‘bak:90’, ‘old:90’, ‘wav:20’, ‘mp3:20’, ‘exe:20’, ‘txt:20’] | True | True | False |
| Display Name | To Files (Interesting) [using Search Engine] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | using Search Engine |
| Output Entities | maltego.Document |
Variants
| DomainToDocumentOther_SE | Search for interesting files hosted on this domain. | maltego.Domain |
| PhraseToDocumentOthers_SE | This transform will search for the given phrase and show interesting files contaning the term. | maltego.Phrase |
To Files (Office) [using Search Engine]
| HTTP_Timeout | HTTP timeout (ms) | int | 8000 | True | True | False |
| bing_search_service_api_key | Bing Search Api Key | string | | True | True | False |
| bing_search_service_api_url | Bing Search Api URL | string | | True | True | False |
| extensions | Search Extension [extension:priority] | string | [‘xls:100’, ‘xlsx:100’, ‘csv:100’, ‘doc:70’, ‘docx:70’, ‘ppt:40’, ‘pptx:40’, ‘mdb:40’, ‘pdf:40’] | True | True | False |
| Display Name | To Files (Office) [using Search Engine] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | using Search Engine |
| Output Entities | maltego.Document |
Variants
| DomainToDocument_SE | Search for office documents hosted on this domain. | maltego.Domain |
| PhraseToDocument_SE | This transform will search for the given phrase and show documents (Office[tm]) containing the term. | maltego.Phrase |
To Emails @domain [using Search Engine]
Description
Search for emails containing the domain.
| HTTP_Timeout | HTTP timeout (ms) | int | 8000 | True | True | False |
| bing_search_service_api_key | Bing Search Api Key | string | | True | True | False |
| bing_search_service_api_url | Bing Search Api URL | string | | True | True | False |
| Display Name | To Emails @domain [using Search Engine] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | using Search Engine |
| Transform Name | DomainToEmailAddress_AtDomain_SE |
| Short Description | Search for emails containing the domain. |
| Input Entities | maltego.Domain |
| Output Entities | maltego.EmailAddress |
To Email addresses [using Search Engine]
Description
Search for related emails.
| HTTP_Timeout | HTTP timeout (ms) | int | 8000 | True | True | False |
| bing_search_service_api_key | Bing Search Api Key | string | | True | True | False |
| bing_search_service_api_url | Bing Search Api URL | string | | True | True | False |
| Display Name | To Email addresses [using Search Engine] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | using Search Engine |
| Transform Name | DomainToEmailAddress_SE |
| Short Description | Search for related emails. |
| Input Entities | maltego.Domain |
| Output Entities | maltego.EmailAddress |
To Email address [From whois info]
Description
This Transform obtains whois information of the IP number, then parses it for email addresses.
| Display Name | To Email address [From whois info] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | From whois info |
| Short Description | This transform obtains whois information of the IP number, then parses it for email addresses. |
| Output Entities | maltego.EmailAddress |
Variants
| DomainToEmailAddress_Whois | maltego.Domain |
| IPAddressToEmailAddress_Whois | maltego.IPv4Address |
To Entities from WHOIS [IBM Watson]
Description
This Transform obtains whois information of the domain then parses it for entities using NER.
| companies_to_ignore | Companies To Ignore | string | [‘icann’, ‘google’, ‘microsoft’, ‘ibm’, ‘facebook’, ‘twitter’, ‘adobe’, ‘creative commons’, ‘hp’, ‘yahoo’, ‘amazon’, ‘youtube’, ‘apple’, ‘ebay’, ‘paypal’] | True | True | False |
| ibm_watson_api_key | IBM Watson Api Key | string | | True | True | False |
| ibm_watson_api_url | IBM Watson Api URL | string | | True | True | False |
| Display Name | To Entities from WHOIS [IBM Watson] |
| Owner | John Doe |
| Author | John Doe |
| Data Source | IBM Watson |
| Transform Name | DomainToEntities_Whois_NER |
| Short Description | This transform obtains whois information of the domain then parses it for entities using NER |
| Input Entities | maltego.Domain |
| Output Entities | maltego.Phrase |
To DNS Name - MX (mail server)
Description
This Transform will find the MX records (mail servers) of a domain.
| Display Name | To DNS Name - MX (mail server) |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | |
| Transform Name | DomainToMXrecord_DNS |
| Short Description | This transform will find the MX records (mail servers) of a domain. |
| Input Entities | maltego.Domain |
| Output Entities | maltego.MXRecord |
To DNS Name - NS (name server)
Description
This Transform will find the NS records (name servers) of a domain.
| Display Name | To DNS Name - NS (name server) |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | |
| Transform Name | DomainToNSrecord_DNS |
| Short Description | This transform will find the NS records (name servers) of a domain. |
| Input Entities | maltego.Domain |
| Output Entities | maltego.NSRecord |
To Phone Numbers [using Search Engine]
Description
Search for related phone numbers.
| HTTP_Timeout | HTTP timeout (ms) | int | 8000 | True | True | False |
| bing_search_service_api_key | Bing Search Api Key | string | | True | True | False |
| bing_search_service_api_url | Bing Search Api URL | string | | True | True | False |
| Display Name | To Phone Numbers [using Search Engine] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | using Search Engine |
| Transform Name | DomainToPhoneNumber_SE |
| Short Description | Search for related phone numbers. |
| Input Entities | maltego.Domain |
| Output Entities | maltego.PhoneNumber |
To Phone numbers [From whois info]
Description
This Transform obtains whois information of the given domain, then parses it for telephone numbers.
| Display Name | To Phone numbers [From whois info] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | From whois info |
| Transform Name | DomainToPhone_Whois |
| Short Description | This transforms obtains whois information of the given domain, then parses it for telephone numbers. |
| Input Entities | maltego.Domain |
| Output Entities | maltego.PhoneNumber |
To DNS Name - SOA (Start of Authority)
Description
Extracts information for this domain from the SOA record.
| Display Name | To DNS Name - SOA (Start of Authority) |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | |
| Transform Name | DomainToSOAInformation |
| Short Description | Extracts information for this domain from the SOA record. |
| Input Entities | maltego.Domain |
| Output Entities | maltego.NSRecord, maltego.EmailAddress |
To DNS Name - SPF (sender policy framework)
Description
Extracts information for this domain from the SPF (txt) record.
| Display Name | To DNS Name - SPF (sender policy framework) |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | |
| Transform Name | DomainToSPFInformation |
| Short Description | Extracts information for this domain from the SPF (txt) record. |
| Input Entities | maltego.Domain |
| Output Entities | maltego.Netblock, maltego.IPv4Address, maltego.DNSName, maltego.MXRecord, maltego.DNSName, maltego.Domain |
To Website using domain [Bing]
Description
Search for websites that contain the domain.
| HTTP_Timeout | HTTP timeout (ms) | int | 8000 | True | True | False |
| bing_search_service_api_key | Bing Search Api Key | string | | True | True | False |
| bing_search_service_api_url | Bing Search Api URL | string | | True | True | False |
| Display Name | To Website using domain [Bing] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | Bing |
| Transform Name | DomainToWebsiteDNS_SE |
| Short Description | Search for websites that contain the domain. |
| Input Entities | maltego.Domain |
| Output Entities | maltego.Website |
To Website [Quick lookup]
Description
This Transform will check to see if there is a www.DOMAIN entry. Useful when used in bulk.
| Display Name | To Website [Quick lookup] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | Quick lookup |
| Transform Name | DomainToWebsite_DNS |
| Short Description | This transform will check to see if there is a www.DOMAIN entry. Useful when used in bulk. |
| Input Entities | maltego.Domain |
| Output Entities | maltego.Website |
To Website mentioning domain [Bing]
Description
Search for websites mentioning the domain in their content.
| HTTP_Timeout | HTTP timeout (ms) | int | 8000 | True | True | False |
| bing_search_service_api_key | Bing Search Api Key | string | | True | True | False |
| bing_search_service_api_url | Bing Search Api URL | string | | True | True | False |
| Display Name | To Website mentioning domain [Bing] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | Bing |
| Transform Name | DomainToWebsite_SE |
| Short Description | Search for websites mentioning the domain in their content. |
| Input Entities | maltego.Domain |
| Output Entities | maltego.Website |
To Website [using Search Engine]
| HTTP_Timeout | HTTP timeout (ms) | int | 8000 | True | True | False |
| bing_search_service_api_key | Bing Search Api Key | string | | True | True | False |
| bing_search_service_api_url | Bing Search Api URL | string | | True | True | False |
| Display Name | To Website [using Search Engine] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | using Search Engine |
| Output Entities | maltego.Website |
Variants
| EmailAddressToDNSName_SE | Search for websites that mention the email. | maltego.EmailAddress |
| PhoneNumberToWebsite_SE | This transform searches for the telephone number and returns related sites. | maltego.PhoneNumber |
| PhraseToWebsite_SE | This transform will search for the given phrase and show the sites where the phrase occurs. | maltego.Phrase |
To Domain [DNS]
Description
This Transform will remove the part in front of the @ sign of the given address.
| Display Name | To Domain [DNS] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | DNS |
| Transform Name | EmailAddressToDomain_DNS |
| Short Description | This transform will remove the part in front of the @ sign of the given address. |
| Input Entities | maltego.EmailAddress |
| Output Entities | maltego.Domain |
To Email Addresses [using Search Engine]
| HTTP_Timeout | HTTP timeout (ms) | int | 8000 | True | True | False |
| bing_search_service_api_key | Bing Search Api Key | string | | True | True | False |
| bing_search_service_api_url | Bing Search Api URL | string | | True | True | False |
| Display Name | To Email Addresses [using Search Engine] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | using Search Engine |
| Output Entities | maltego.EmailAddress |
Variants
| EmailAddressToEmailAddress_SE | This transform will search for the email address and show related email addresses. | maltego.EmailAddress |
| PhraseToEmailAddress_SE | This transform will search for the phrase and show related email addresses. | maltego.Phrase |
To Person [Parse separator]
Description
This Transform attempts to parse the email address to a person’s name using separators
| format | Format (FL-firstnamelastname,LF-lastnamefirstname) | string | FL | True | True | False |
| Display Name | To Person [Parse separator] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | Parse separator |
| Transform Name | EmailAddressToPerson_Parse |
| Short Description | This transform tries to figure out if it can parse the email address to a person’s name using separators |
| Input Entities | maltego.EmailAddress |
| Output Entities | maltego.Person |
To Phone number [using Search Engine]
Description
This Transform will search for the given email address and show the related telephone numbers.
| HTTP_Timeout | HTTP timeout (ms) | int | 8000 | True | True | False |
| bing_search_service_api_key | Bing Search Api Key | string | | True | True | False |
| bing_search_service_api_url | Bing Search Api URL | string | | True | True | False |
| Display Name | To Phone number [using Search Engine] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | using Search Engine |
| Transform Name | EmailAddressToPhoneNumber_SE |
| Short Description | This transform will search for the given email address and show the related telephone numbers. |
| Input Entities | maltego.EmailAddress |
| Output Entities | maltego.PhoneNumber |
To URLs [Show Search Engine results]
Description
This Transform dumps the URLs collected from the search engine.
| Display Name | To URLs [Show Search Engine results] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | Show Search Engine results |
| Short Description | This transform just dumps the URLs collected from the search engine. |
| Output Entities | maltego.URL |
Variants
| EmailAddressToURL_Expand | maltego.EmailAddress |
| PhoneNumberToURL_Expand | maltego.PhoneNumber |
To Flickr Account
Description
Looks up an email address on flickr and returns account details.
| Display Name | To Flickr Account |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | |
| Transform Name | emailToFlickrAccount |
| Short Description | Looks up an email address on flickr and returns account details. |
| Input Entities | maltego.EmailAddress |
| Output Entities | maltego.affiliation.Flickr |
To Myspace Account
Description
Looks up an email address on myspace and returns account details.
| Display Name | To Myspace Account |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | |
| Transform Name | emailToMyspaceAccount |
| Short Description | Looks up an email address on myspace and returns account details. |
| Input Entities | maltego.EmailAddress |
| Output Entities | maltego.affiliation.Myspace, maltego.Alias |
To Circular Area
| areaRoundValue | Radius of Area in m | int | 1000 | True | True | False |
| Display Name | To Circular Area |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | |
| Transform Name | ToArea |
| Short Description | |
| Input Entities | maltego.GPS |
| Output Entities | maltego.CircularArea |
To Location [Using nominatim.openstreetmap.org]
Description
Takes GPS Co-ordinates to an address via nominatim.openstreetmap.org.
| Display Name | To Location [Using nominatim.openstreetmap.org] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | Using nominatim.openstreetmap.org |
| Transform Name | toLocationGeoCode |
| Short Description | Takes GPS Co-ordinates to an address via nominatim.openstreetmap.org |
| Input Entities | maltego.GPS |
| Output Entities | maltego.Location |
To Location (broad) [Using nominatim.openstreetmap.org]
Description
Takes GPS Co-ordinates to an broader address via nominatim.openstreetmap.org.
| Display Name | To Location (broad) [Using nominatim.openstreetmap.org] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | Using nominatim.openstreetmap.org |
| Transform Name | toLocationGeoCodeBroad |
| Short Description | Takes GPS Co-ordinates to an broader address via nominatim.openstreetmap.org |
| Input Entities | maltego.GPS |
| Output Entities | maltego.Location |
To Website using IP: [Bing]
Description
Search for websites that have been hosted on this IP.
| HTTP_Timeout | HTTP timeout (ms) | int | 8000 | True | True | False |
| bing_search_service_api_key | Bing Search Api Key | string | | True | True | False |
| bing_search_service_api_url | Bing Search Api URL | string | | True | True | False |
| Display Name | To Website using IP: [Bing] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | Bing |
| Transform Name | IPAddressToDNSNameBing_SE |
| Short Description | Search for websites that have been hosted on this IP. |
| Input Entities | maltego.IPv4Address |
| Output Entities | maltego.Website |
To DNS Name [Reverse DNS]
Description
This Transform reverse resolves an IP address to a DNS name using plain old DNS
| Display Name | To DNS Name [Reverse DNS] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | Reverse DNS |
| Transform Name | IPAddressToDNSName_DNS |
| Short Description | This transform reverse resolves an IP address to a DNS name using plain old DNS |
| Input Entities | maltego.IPv4Address |
| Output Entities | maltego.DNSName |
To Entities From WHOIS [IBM Watson]
| companies_to_ignore | Companies To Ignore | string | [‘icann’, ‘google’, ‘microsoft’, ‘ibm’, ‘facebook’, ‘twitter’, ‘adobe’, ‘creative commons’, ‘hp’, ‘yahoo’, ‘amazon’, ‘youtube’, ‘apple’, ‘ebay’, ‘paypal’] | True | True | False |
| ibm_watson_api_key | IBM Watson Api Key | string | | True | True | False |
| ibm_watson_api_url | IBM Watson Api URL | string | | True | True | False |
| Display Name | To Entities From WHOIS [IBM Watson] |
| Owner | |
| Author | |
| Data Source | IBM Watson |
| Output Entities | maltego.Phrase |
Variants
| IPAddressToEntities_Whois_NER | This transform obtains whois information of IP number, then parses it for entities using NER | maltego.IPv4Address |
| NetblockToEntities_NER_Whois | This transform obtains whois information of netblock (well the first IP in the block), then parses it for entities using NER | maltego.Netblock |
To Netblock [Using natural boundaries]
Description
This Transform will carve a netblock from an IP - counting a certain number of IPs up and down.
| cutsize | Block Size | int | 256 | True | True | False |
| Display Name | To Netblock [Using natural boundaries] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | Using natural boundaries |
| Transform Name | IPAddressToNetblock_Cuts |
| Short Description | This transform will carve a netblock from an IP - counting a certain number of IPs up and down. |
| Input Entities | maltego.IPv4Address |
| Output Entities | maltego.Netblock |
To Netblock [Using whois info]
Description
This Transform will get the netblock via the whois service (ARIN/APNIC/LACNIC/AFRINIC/RIPE)
| Display Name | To Netblock [Using whois info] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | Using whois info |
| Transform Name | IPAddressToNetblock_whois |
| Short Description | This transform will get the netblock via the whois service (ARIN/APNIC/LACNIC/AFRINIC/RIPE) |
| Input Entities | maltego.IPv4Address |
| Output Entities | maltego.Netblock |
To Phone number [From whois info]
Description
This Transform obtains whois information of IP number, then parses it for telephone numbers
| Display Name | To Phone number [From whois info] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | From whois info |
| Transform Name | IPAddressToPhone_Whois |
| Short Description | Transforms obtains whois information of IP number, then parses it for telephone numbers |
| Input Entities | maltego.IPv4Address |
| Output Entities | maltego.PhoneNumber |
To Website mentioning IP [Bing]
Description
Find websites containing the IP.
| HTTP_Timeout | HTTP timeout (ms) | int | 8000 | True | True | False |
| bing_search_service_api_key | Bing Search Api Key | string | | True | True | False |
| bing_search_service_api_url | Bing Search Api URL | string | | True | True | False |
| Display Name | To Website mentioning IP [Bing] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | Bing |
| Transform Name | IPAddressToWebsite_SE |
| Short Description | Find websites containing the IP. |
| Input Entities | maltego.IPv4Address |
| Output Entities | maltego.Website |
To Location [city, country]
| language | Country Language | string | en | True | True | False |
| Display Name | To Location [city, country] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | city, country |
| Output Entities | maltego.Location |
Variants
| toLocation | This transform takes an IP address to a location with the MaxMind free city database. | maltego.IPv4Address |
| toLocationNetblock | This transform takes an netblock to a location with the MaxMind free city database. | maltego.Netblock |
To Location [country]
| language | Country Language | string | en | True | True | False |
| Display Name | To Location [country] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | country |
| Output Entities | maltego.Location |
Variants
| toLocationCountry | This transform takes an IP address to a location with the MaxMind free city database. | maltego.IPv4Address |
| toLocationCountryNetblock | This transform takes a Netblock to a location with the MaxMind free city database. | maltego.Netblock |
To IP addresses [Found in Netblock]
Description
Converts Netblock to IPs within that netblock.
| Display Name | To IP addresses [Found in Netblock] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | Found in Netblock |
| Transform Name | NetblockToIPs |
| Short Description | Converts Netblock to IPs within that netblock. |
| Input Entities | maltego.Netblock |
| Output Entities | maltego.IPv4Address |
To Netblocks [Cuts Netblock into smaller ones]
Description
Converts Netblock to smaller Netblocks.
| netblockSize | Netblock size | string | | True | True | False |
| Display Name | To Netblocks [Cuts Netblock into smaller ones] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | Cuts Netblock into smaller ones |
| Transform Name | NetblockToNetblocks |
| Short Description | Converts Netblock to smaller Netblocks. |
| Input Entities | maltego.Netblock |
| Output Entities | maltego.Netblock |
To EmailAddress [Bing]
Description
Search for possible email addresses.
| HTTP_Timeout | HTTP timeout (ms) | int | 8000 | True | True | False |
| additional | Additional term (space=none) | string | | True | True | False |
| bing_search_service_api_key | Bing Search Api Key | string | | True | True | False |
| bing_search_service_api_url | Bing Search Api URL | string | | True | True | False |
| site | Domain/TLD (space=none) | string | | True | True | False |
| Display Name | To EmailAddress [Bing] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | Bing |
| Transform Name | PersonToEmailAddress_SE |
| Short Description | Search for possible email addresses. |
| Input Entities | maltego.Person |
| Output Entities | maltego.EmailAddress |
To PhoneNumber [Bing]
Description
Search for possible phone numbers.
| HTTP_Timeout | HTTP timeout (ms) | int | 8000 | True | True | False |
| additional | Additional term (space=none) | string | | True | True | False |
| bing_search_service_api_key | Bing Search Api Key | string | | True | True | False |
| bing_search_service_api_url | Bing Search Api URL | string | | True | True | False |
| site | Domain/TLD (space=none) | string | | True | True | False |
| Display Name | To PhoneNumber [Bing] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | Bing |
| Transform Name | PersonToPhoneNumber_SE |
| Short Description | Search for possible phone numbers. |
| Input Entities | maltego.Person |
| Output Entities | maltego.Website |
To Website [Bing]
Description
This transform shows sites where a permutation of the person’s name was found.
| HTTP_Timeout | HTTP timeout (ms) | int | 8000 | True | True | False |
| additional | Additional term (space=none) | string | | True | True | False |
| bing_search_service_api_key | Bing Search Api Key | string | | True | True | False |
| bing_search_service_api_url | Bing Search Api URL | string | | True | True | False |
| site | Domain/TLD (space=none) | string | | True | True | False |
| Display Name | To Website [Bing] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | Bing |
| Transform Name | PersonToWebsite_SE |
| Short Description | This transform shows sites where a permutation of the person’s name was found. |
| Input Entities | maltego.Person |
| Output Entities | maltego.Website |
To Email Address [using Search Engine]
Description
This Transform searches for the telephone number and returns related email addresses.
| HTTP_Timeout | HTTP timeout (ms) | int | 8000 | True | True | False |
| bing_search_service_api_key | Bing Search Api Key | string | | True | True | False |
| bing_search_service_api_url | Bing Search Api URL | string | | True | True | False |
| Display Name | To Email Address [using Search Engine] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | using Search Engine |
| Transform Name | PhoneNumberToEmailAddress_SE |
| Short Description | This transform searches for the telephone number and returns related email addresses. |
| Input Entities | maltego.PhoneNumber |
| Output Entities | maltego.EmailAddress |
To Phone Number [using Search Engine]
Description
This Transform searches for the telephone number and returns related telephone numbers.
| HTTP_Timeout | HTTP timeout (ms) | int | 8000 | True | True | False |
| bing_search_service_api_key | Bing Search Api Key | string | | True | True | False |
| bing_search_service_api_url | Bing Search Api URL | string | | True | True | False |
| Display Name | To Phone Number [using Search Engine] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | using Search Engine |
| Transform Name | PhoneNumberToPhoneNumber_SE |
| Short Description | This transform searches for the telephone number and returns related telephone numbers. |
| Input Entities | maltego.PhoneNumber |
| Output Entities | maltego.PhoneNumber |
To Telephone numbers [using Search Engine]
Description
This Transform will search for the phrase and shows the related telephone numbers.
| HTTP_Timeout | HTTP timeout (ms) | int | 8000 | True | True | False |
| bing_search_service_api_key | Bing Search Api Key | string | | True | True | False |
| bing_search_service_api_url | Bing Search Api URL | string | | True | True | False |
| exact_match | Exact Match | boolean | False | True | True | False |
| Display Name | To Telephone numbers [using Search Engine] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | using Search Engine |
| Transform Name | PhraseToPhoneNumber_SE |
| Short Description | This transform will search for the phrase and shows the related telephone numbers. |
| Input Entities | maltego.Phrase |
| Output Entities | maltego.PhoneNumber |
To Websites - specifics (pastebin) [using SE]
Description
This Transform will search for the given phrase and show the sites where the phrase occurs.
| HTTP_Timeout | HTTP timeout (ms) | int | 8000 | True | True | False |
| bing_search_service_api_key | Bing Search Api Key | string | | True | True | False |
| bing_search_service_api_url | Bing Search Api URL | string | | True | True | False |
| exact_match | Exact Match | boolean | False | True | True | False |
| sitelist | Site List | string | [‘pastie.org’, ‘pastebin.com’, ‘pastebin.ca’] | True | True | False |
| Display Name | To Websites - specifics (pastebin) [using SE] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | using SE |
| Transform Name | PhraseToSpecificSites_SE |
| Short Description | This transform will search for the given phrase and show the sites where the phrase occurs. |
| Input Entities | maltego.Phrase |
| Output Entities | maltego.Website |
Description
This Transform will extract aliases from a tweet.
| Display Name | To Aliases [mentioned in Tweet] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | mentioned in Tweet |
| Transform Name | pullAliases |
| Short Description | The transform will extract aliases from a tweet. |
| Input Entities | maltego.Twit |
| Output Entities | maltego.Alias |
Description
Simply splits tweet into words and pulls the hashtag.
| IgnoreHashes | Hashes to ignore. | string | | True | True | False |
| Display Name | To Hash Tags |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | |
| Transform Name | pullHashTags |
| Short Description | Simply splits tweet into words and pulls the hashtag. |
| Input Entities | maltego.Twit |
| Output Entities | maltego.hashtag |
To Sentiment [IBM Watson]
Description
This Transform will return the sentiment of a Tweet.
| companies_to_ignore | Companies To Ignore | string | [‘icann’, ‘google’, ‘microsoft’, ‘ibm’, ‘facebook’, ‘twitter’, ‘adobe’, ‘creative commons’, ‘hp’, ‘yahoo’, ‘amazon’, ‘youtube’, ‘apple’, ‘ebay’, ‘paypal’] | True | True | False |
| ibm_watson_api_key | IBM Watson Api Key | string | | True | True | False |
| ibm_watson_api_url | IBM Watson Api URL | string | | True | True | False |
| Display Name | To Sentiment [IBM Watson] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | IBM Watson |
| Transform Name | TweetSentiment |
| Short Description | This transform will get a sentiment of a Tweet. |
| Input Entities | maltego.Twit |
| Output Entities | Phrase |
To Stock Symbol
Description
Simply splits tweet into words and pulls the stock symbols.
| IgnoreHashes | Stocks to ignore. | string | | True | True | False |
| Display Name | To Stock Symbol |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | |
| Transform Name | pullStockSymbol |
| Short Description | Simply splits tweet into words and pulls the stock symbols. |
| Input Entities | maltego.Twit |
| Output Entities | maltego.StockSymbol |
Description
Attempts to return URLs from tweets.
| expand_urls | Expand URLs | boolean | True | True | True | False |
| include_tweets | Include Tweet Links | boolean | False | True | True | False |
| Display Name | To URLs [Extracts links from Tweet] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | Extracts links from Tweet |
| Transform Name | pullURLs |
| Short Description | Try return URLs from tweets. |
| Input Entities | maltego.Twit |
| Output Entities | maltego.URL |
To Words [English]
| ignoreRT | Ignore Retweets | boolean | True | True | True | False |
| wordListDepth | Word List Depth | int | 3500 | True | True | False |
| Display Name | To Words [English] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | English |
| Transform Name | TweetToWords |
| Short Description | |
| Input Entities | maltego.Twit |
| Output Entities | maltego.Phrase |
To Email Addresses [Found on web page]
Description
This Transform finds the email addresses on the URL.
| HTTP_Timeout | HTTP timeout (ms) | int | 8000 | True | True | False |
| Display Name | To Email Addresses [Found on web page] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | Found on web page |
| Transform Name | URLToEmail_Parse |
| Short Description | This transform finds the email addresses on the URL |
| Input Entities | maltego.URL |
| Output Entities | maltego.EmailAddress |
To Phone numbers [Found on this web page]
Description
This Transform returns the phone numbers on the URL.
| Display Name | To Phone numbers [Found on this web page] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | Found on this web page |
| Transform Name | URLToPhoneNumber_Parse |
| Short Description | This transform finds the phone numbers on the URL |
| Input Entities | maltego.URL |
| Output Entities | maltego.PhoneNumber |
URL to Title
Description
Fetches title from a given URL. Looks for HTTP and simple JS redirects.
| Display Name | URL to Title |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | |
| Transform Name | URLToTitle |
| Short Description | Fetches title from a given URL. Looks for HTTP and simple JS redirects. |
| Input Entities | maltego.URL |
| Output Entities | maltego.WebTitle |
To Website [Convert]
Description
This Transform converts an URL to a website
| Display Name | To Website [Convert] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | Convert |
| Transform Name | URLToWebsite_Convert |
| Short Description | This transform converts an URL to a website |
| Input Entities | maltego.URL |
| Output Entities | maltego.Website |
To Website [Links on this web page]
Description
This Transform looks for outgoing links on the URL and show them as websites.
| HTTP_Timeout | HTTP timeout (ms) | int | 8000 | True | True | False |
| Display Name | To Website [Links on this web page] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | Links on this web page |
| Transform Name | URLToWebsite_Parse |
| Short Description | This transform looks for outgoing links on the URL and show them as websites |
| Input Entities | maltego.URL |
| Output Entities | maltego.Website |
Mirror: Email addresses found
Description
This Transform uses a website mirror to spider the site and extract email addresses.
| Display Name | Mirror: Email addresses found |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | |
| Transform Name | WebsiteToEmailAddress_Mirror |
| Short Description | This transform uses a website mirror to spider the site and extract email addresses |
| Input Entities | maltego.Website |
| Output Entities | maltego.EmailAddress |
To Website Title
Description
This Transform fetches the title/s from a given website. Looks for HTTP and simple JS redirects.
| request_connect_timeout | Request Connect Timeout (s) | string | | True | True | False |
| request_read_timeout | Request Read Timeout (s) | string | | True | True | False |
| Display Name | To Website Title |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | |
| Transform Name | WebsiteToWebTitle_Mech |
| Short Description | Fetches title from a given website. Looks for HTTP and simple JS redirects. |
| Input Entities | maltego.Website |
| Output Entities | maltego.WebTitle |
To URLs [show Search Engine results]
Description
This Transform dumps the URLs collected.
| Display Name | To URLs [show Search Engine results] |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | show Search Engine results |
| Transform Name | WebsiteToURL_Expand |
| Short Description | This transform dumps the URLs collected. |
| Input Entities | maltego.Website |
| Output Entities | maltego.URL |
Mirror: External links found
Description
This transform uses a website mirror to spider the site and extract links.
| Display Name | Mirror: External links found |
| Owner | Maltego Technologies |
| Author | Maltego Technologies |
| Data Source | |
| Transform Name | WebsiteToWebsite_Mirror |
| Short Description | This transform uses a website mirror to spider the site and extract links. |
| Input Entities | maltego.Website |
| Output Entities | maltego.Phrase |