SpyCloud
Modified on: Wed, 12 Apr, 2023 at 3:54 PM
Overview
SpyCloud Transforms re-captured darknet data to protect businesses from cyberattacks. Its products operationalize Cybercrime Analytics (C2A) to produce actionable insights that allow enterprises to proactively prevent ransomware and account takeover, protect their business from consumer fraud losses, and investigate cybercrime incidents.
Powered by 350B+ assets, SpyCloud Investigations enables analysts to efficiently piece together decades-worth of criminals’ digital breadcrumbs to de-anonymize specific threat actors engaging in cybercrime, financial fraud, and other illegal activities.
SpyCloud customers include half of the ten largest global enterprises, mid-size companies, and government agencies around the world. Headquartered in Austin, TX, SpyCloud is home to nearly 200 cybersecurity experts whose mission is to make the internet a safer place.

You can read more about SpyCloud Transforms for Maltego on our website here.
Pricing & Access
Community Hub
Only available with Maltego Enterprise plan.
Commercial Hub
Users with a Maltego Enterprise plan have the following access options
BRING YOUR OWN KEY
Plug in your SpyCloud API key to install and use the Transforms in Maltego.
[SC] To Account Secret
Display Name | [SC] To Account Secret |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToAccountSecretFromSpyCloudBreachRecord |
Short Description | |
Input Entities | spycloud.BreachRecord |
Output Entities | Phrase |
[SC] To Alias(es)
Display Name | [SC] To Alias(es) |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToAliasesFromSpyCloudBreachRecord |
Short Description | |
Input Entities | spycloud.BreachRecord |
Output Entities | Phrase |
[SC] To Breach Type
Display Name | [SC] To Breach Type |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToBreachTypeFromSpyCloudBreachSource |
Short Description | |
Input Entities | spycloud.BreachSource |
Output Entities | Phrase |
[SC] To Breached Domain
Display Name | [SC] To Breached Domain |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToDomainFromSpyCloudBreachSource |
Short Description | |
Input Entities | spycloud.BreachSource |
Output Entities | Phrase |
[SC] To Email Domain(s)
Display Name | [SC] To Email Domain(s) |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToEmailDomainFromSpyCloudBreachRecord |
Short Description | |
Input Entities | spycloud.BreachRecord |
Output Entities | Phrase |
[SC] To Email Address(es)
Display Name | [SC] To Email Address(es) |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToEmailFromSpyCloudBreachRecord |
Short Description | |
Input Entities | spycloud.BreachRecord |
Output Entities | Phrase |
[SC] To GPS Coordinates
Display Name | [SC] To GPS Coordinates |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToGPSCoordinateFromSpyCloudBreachRecord |
Short Description | |
Input Entities | spycloud.BreachRecord |
Output Entities | Phrase |
[SC] To IPv4 Address(es)
Display Name | [SC] To IPv4 Address(es) |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToIPAddressesFromSpyCloudBreachRecord |
Short Description | |
Input Entities | spycloud.BreachRecord |
Output Entities | Phrase |
[SC] To Location
Display Name | [SC] To Location |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToLocationFromSpyCloudBreachRecord |
Short Description | |
Input Entities | spycloud.BreachRecord |
Output Entities | Phrase |
Display Name | [SC] To Media URLs |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToMediaUrlsFromSpyCloudBreachSource |
Short Description | |
Input Entities | spycloud.BreachSource |
Output Entities | Phrase |
[SC] To Password(s)
Display Name | [SC] To Password(s) |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToPasswordsFromSpyCloudBreachRecord |
Short Description | |
Input Entities | spycloud.BreachRecord |
Output Entities | Phrase |
[SC] To Person
Display Name | [SC] To Person |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToPersonFromSpyCloudBreachRecord |
Short Description | |
Input Entities | spycloud.BreachRecord |
Output Entities | Phrase |
[SC] To Phone Number
Display Name | [SC] To Phone Number |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToPhoneNumberFromSpyCloudBreachRecord |
Short Description | |
Input Entities | spycloud.BreachRecord |
Output Entities | Phrase |
[SC] To Plaintext Password
Display Name | [SC] To Plaintext Password |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToPlaintextPasswordsFromSpyCloudBreachRecord |
Short Description | |
Input Entities | spycloud.BreachRecord |
Output Entities | Phrase |
[SC] To Social Network Handle(s)
Display Name | [SC] To Social Network Handle(s) |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToSocialNetworkAliasesFromSpyCloudBreachRecord |
Short Description | |
Input Entities | spycloud.BreachRecord |
Output Entities | Phrase |
[SC] To Breach Records using Username
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Records using Username |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Short Description | |
Output Entities | Phrase |
Variants
ToSpyCloudBreachRecordsFromAlias | maltego.Alias |
ToSpyCloudBreachRecordsFromBreachRecordAsUsername | spycloud.BreachRecord |
ToSpyCloudBreachRecordsFromSocialFlickrAsUsername | maltego.affiliation.Flickr |
ToSpyCloudBreachRecordsFromSocialTwitterAsUsername | maltego.affiliation.Twitter |
[SC] To Breach Records using Email Username
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Records using Email Username |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Short Description | |
Output Entities | Phrase |
Variants
ToSpyCloudBreachRecordsFromAliasAsEmailUsername | maltego.Alias |
ToSpyCloudBreachRecordsFromBreachRecordAsEmailUsername | spycloud.BreachRecord |
ToSpyCloudBreachRecordsFromEmailAsEmailUsername | maltego.EmailAddress |
ToSpyCloudBreachRecordsFromSocialFlickrAsEmailUsername | maltego.affiliation.Flickr |
ToSpyCloudBreachRecordsFromSocialTwitterAsEmailUsername | maltego.affiliation.Twitter |
[SC] To Breach Records using Fuzzy Email Username
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Records using Fuzzy Email Username |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Short Description | |
Output Entities | Phrase |
Variants
ToSpyCloudBreachRecordsFromAliasAsEmailUsernameFuzzy | maltego.Alias |
ToSpyCloudBreachRecordsFromBreachRecordAsEmailUsernameFuzzy | spycloud.BreachRecord |
ToSpyCloudBreachRecordsFromEmailAsEmailUsernameFuzzy | maltego.EmailAddress |
[SC] To Breach Records using Fuzzy Username
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Records using Fuzzy Username |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Short Description | |
Output Entities | Phrase |
Variants
ToSpyCloudBreachRecordsFromAliasFuzzy | maltego.Alias |
ToSpyCloudBreachRecordsFromBreachRecordAsUsernameFuzzy | spycloud.BreachRecord |
ToSpyCloudBreachRecordsFromSocialFlickrAsUsernameFuzzy | maltego.affiliation.Flickr |
ToSpyCloudBreachRecordsFromSocialTwitterAsUsernameFuzzy | maltego.affiliation.Twitter |
[SC] To Breach Records using DNS Name
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.type | Search Results Type | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Records using DNS Name |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToSpyCloudBreachRecordsFromDNSName |
Short Description | |
Input Entities | maltego.DNSName |
Output Entities | Phrase |
[SC] To Breach Records using Domain
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.type | Search Results Type | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Records using Domain |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToSpyCloudBreachRecordsFromDomain |
Short Description | |
Input Entities | maltego.Domain |
Output Entities | Phrase |
[SC] To Breach Records using Email Address
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.hashQuery | Search using SHA1 hash | string | false | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Records using Email Address |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToSpyCloudBreachRecordsFromEmail |
Short Description | |
Input Entities | maltego.EmailAddress |
Output Entities | Phrase |
[SC] To Breach Records using Email as Username
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Records using Email as Username |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToSpyCloudBreachRecordsFromEmailAsUsername |
Short Description | |
Input Entities | maltego.EmailAddress |
Output Entities | Phrase |
[SC] To Breach Records using IPv4 Address
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Records using IPv4 Address |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToSpyCloudBreachRecordsFromIPAddress |
Short Description | |
Input Entities | maltego.IPv4Address |
Output Entities | Phrase |
[SC] To Breach Records using Netblock
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Records using Netblock |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToSpyCloudBreachRecordsFromNetblock |
Short Description | |
Input Entities | maltego.Netblock |
Output Entities | Phrase |
[SC] To Breach Records using Phone Number
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Records using Phone Number |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToSpyCloudBreachRecordsFromPhoneNumber |
Short Description | |
Input Entities | maltego.PhoneNumber |
Output Entities | Phrase |
[SC] To Breach Records using Plaintext Password
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Records using Plaintext Password |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToSpyCloudBreachRecordsFromPhrase |
Short Description | |
Input Entities | maltego.Phrase |
Output Entities | Phrase |
[SC] To Breach Records using Fuzzy Plaintext Password
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Records using Fuzzy Plaintext Password |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToSpyCloudBreachRecordsFromPhraseFuzzy |
Short Description | |
Input Entities | maltego.Phrase |
Output Entities | Phrase |
[SC] To Breach Records using Social Handle
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.type | Search Results Type | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Records using Social Handle |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToSpyCloudBreachRecordsFromSocialAlias |
Short Description | |
Input Entities | maltego.Alias |
Output Entities | Phrase |
[SC] To Breach Records using Fuzzy Social Handle
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.type | Search Results Type | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Records using Fuzzy Social Handle |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToSpyCloudBreachRecordsFromSocialAliasFuzzy |
Short Description | |
Input Entities | maltego.Alias |
Output Entities | Phrase |
[SC] To Breach Records from Social Facebook
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.type | Search Results Type | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Records from Social Facebook |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToSpyCloudBreachRecordsFromSocialFacebook |
Short Description | |
Input Entities | maltego.affiliation.Facebook |
Output Entities | Phrase |
[SC] To Breach Records Using Email Username
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Records Using Email Username |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToSpyCloudBreachRecordsFromSocialFacebookAsEmailUsername |
Short Description | |
Input Entities | maltego.affiliation.Facebook |
Output Entities | Phrase |
[SC] To Breach Records using Email Username Fuzzy
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Records using Email Username Fuzzy |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Short Description | |
Output Entities | Phrase |
Variants
ToSpyCloudBreachRecordsFromSocialFacebookAsEmailUsernameFuzzy | maltego.affiliation.Facebook |
ToSpyCloudBreachRecordsFromSocialFlickrAsEmailUsernameFuzzy | maltego.affiliation.Flickr |
[SC] To Breach Records Using Username
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Records Using Username |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToSpyCloudBreachRecordsFromSocialFacebookAsUsername |
Short Description | |
Input Entities | maltego.affiliation.Facebook |
Output Entities | Phrase |
[SC] To Breach Records Using Username Fuzzy
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Records Using Username Fuzzy |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToSpyCloudBreachRecordsFromSocialFacebookAsUsernameFuzzy |
Short Description | |
Input Entities | maltego.affiliation.Facebook |
Output Entities | Phrase |
[SC] To Breach Records from Social Facebook Fuzzy
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.type | Search Results Type | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Records from Social Facebook Fuzzy |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToSpyCloudBreachRecordsFromSocialFacebookFuzzy |
Short Description | |
Input Entities | maltego.affiliation.Facebook |
Output Entities | Phrase |
[SC] To Breach Records from Social Flickr
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.type | Search Results Type | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Records from Social Flickr |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToSpyCloudBreachRecordsFromSocialFlickr |
Short Description | |
Input Entities | maltego.affiliation.Flickr |
Output Entities | Phrase |
[SC] To Breach Records from Social Flickr Fuzzy
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.type | Search Results Type | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Records from Social Flickr Fuzzy |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToSpyCloudBreachRecordsFromSocialFlickrFuzzy |
Short Description | |
Input Entities | maltego.affiliation.Flickr |
Output Entities | Phrase |
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.type | Search Results Type | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Records from Social Twitter |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToSpyCloudBreachRecordsFromSocialTwitter |
Short Description | |
Input Entities | maltego.affiliation.Twitter |
Output Entities | Phrase |
[SC] To Breach Records Using Email Username Fuzzy
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Records Using Email Username Fuzzy |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToSpyCloudBreachRecordsFromSocialTwitterAsEmailUsernameFuzzy |
Short Description | |
Input Entities | maltego.affiliation.Twitter |
Output Entities | Phrase |
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.type | Search Results Type | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Records from Social Twitter Fuzzy |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToSpyCloudBreachRecordsFromSocialTwitterFuzzy |
Short Description | |
Input Entities | maltego.affiliation.Twitter |
Output Entities | Phrase |
[SC] To Breach Records using URL
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.type | Search Results Type | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Records using URL |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToSpyCloudBreachRecordsFromURL |
Short Description | |
Input Entities | maltego.URL |
Output Entities | Phrase |
[SC] To Breach Source
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Source |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Short Description | |
Output Entities | Phrase |
Variants
ToSpyCloudBreachSourceFromBreachID | spycloud.BreachID |
ToSpyCloudBreachSourceFromSpyCloudBreachRecord | spycloud.BreachRecord |
[SC] To Botnet Domain
Display Name | [SC] To Botnet Domain |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToTargetDomainFromSpyCloudBreachRecord |
Short Description | |
Input Entities | spycloud.BreachRecord |
Output Entities | Phrase |
[SC] To Botnet URL
Display Name | [SC] To Botnet URL |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToTargetURLFromSpyCloudBreachRecord |
Short Description | |
Input Entities | spycloud.BreachRecord |
Output Entities | Phrase |
[SC] To User Agent
Display Name | [SC] To User Agent |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToUserAgentFromSpyCloudBreachRecord |
Short Description | |
Input Entities | spycloud.BreachRecord |
Output Entities | Phrase |
[SC] To User Browser
Display Name | [SC] To User Browser |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToUserBrowserAgentFromSpyCloudBreachRecord |
Short Description | |
Input Entities | spycloud.BreachRecord |
Output Entities | Phrase |
[SC] To User Homepage
Display Name | [SC] To User Homepage |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToUserHomepageFromSpyCloudBreachRecord |
Short Description | |
Input Entities | spycloud.BreachRecord |
Output Entities | Phrase |
[SC] To User Hostname
Display Name | [SC] To User Hostname |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToUserHostnameFromSpyCloudBreachRecord |
Short Description | |
Input Entities | spycloud.BreachRecord |
Output Entities | Phrase |
[SC] To User O/S
Display Name | [SC] To User O/S |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToUserOSFromSpyCloudBreachRecord |
Short Description | |
Input Entities | spycloud.BreachRecord |
Output Entities | Phrase |
[SC] To User System Registered Organization
Display Name | [SC] To User System Registered Organization |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToUserSystemOrganizationFromSpyCloudBreachRecord |
Short Description | |
Input Entities | spycloud.BreachRecord |
Output Entities | Phrase |
[SC] To User System Registered Owner
Display Name | [SC] To User System Registered Owner |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToUserSystemOwnerFromSpyCloudBreachRecord |
Short Description | |
Input Entities | spycloud.BreachRecord |
Output Entities | Phrase |
[SC] To User Technologies
Display Name | [SC] To User Technologies |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToUserTechnologiesFromSpyCloudBreachRecord |
Short Description | |
Input Entities | spycloud.BreachRecord |
Output Entities | Phrase |
[SC] To Breach ID
Display Name | [SC] To Breach ID |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToBreachIDFromSpyCloudBreachSource |
Short Description | |
Input Entities | spycloud.BreachSource |
Output Entities | Phrase |
[SC] To Credit Card Number
Display Name | [SC] To Credit Card Number |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToCreditCardNumberFromSpyCloudBreachRecord |
Short Description | |
Input Entities | spycloud.BreachRecord |
Output Entities | Phrase |
[SC] To Driver’s License
Display Name | [SC] To Driver’s License |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToDriversLicenseFromSpyCloudBreachRecord |
Short Description | |
Input Entities | spycloud.BreachRecord |
Output Entities | Phrase |
[SC] To Machine ID
Display Name | [SC] To Machine ID |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToInfectedMachineIdsFromSpyCloudBreachRecord |
Short Description | |
Input Entities | spycloud.BreachRecord |
Output Entities | Phrase |
[SC] To National ID
Display Name | [SC] To National ID |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToNationalIdsFromSpyCloudBreachRecord |
Short Description | |
Input Entities | spycloud.BreachRecord |
Output Entities | Phrase |
[SC] To Passport Number
Display Name | [SC] To Passport Number |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToPassportNumbersFromSpyCloudBreachRecord |
Short Description | |
Input Entities | spycloud.BreachRecord |
Output Entities | Phrase |
[SC] To Social Security Number
Display Name | [SC] To Social Security Number |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToSocialSecurityNumberFromSpyCloudBreachRecord |
Short Description | |
Input Entities | spycloud.BreachRecord |
Output Entities | Phrase |
[SC] To User System Domain
Display Name | [SC] To User System Domain |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToUserSystemDomainFromSpyCloudBreachRecord |
Short Description | |
Input Entities | spycloud.BreachRecord |
Output Entities | Phrase |
[SC] To Breach Records using Bank Account Number
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.hashQuery | Search using SHA1 hash | string | false | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Records using Bank Account Number |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToSpyCloudBreachRecordsFromBankAccountNumber |
Short Description | |
Input Entities | maltego.BankAccount |
Output Entities | Phrase |
[SC] To Breach Records using Credit Card Number
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Records using Credit Card Number |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToSpyCloudBreachRecordsFromCreditCardNumber |
Short Description | |
Input Entities | maltego.BankAccount |
Output Entities | Phrase |
[SC] To Breach Records using Driver’s License
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.hashQuery | Search using SHA1 hash | string | false | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Records using Driver’s License |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToSpyCloudBreachRecordsFromDriversLicense |
Short Description | |
Input Entities | maltego.IdentificationNumber |
Output Entities | Phrase |
[SC] To Breach Records using Machine ID
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Records using Machine ID |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToSpyCloudBreachRecordsFromInfectedMachineId |
Short Description | |
Input Entities | maltego.Computer |
Output Entities | Phrase |
[SC] To Breach Records using National ID
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.hashQuery | Search using SHA1 hash | string | false | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Records using National ID |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToSpyCloudBreachRecordsFromNationalId |
Short Description | |
Input Entities | maltego.IdentificationNumber |
Output Entities | Phrase |
[SC] To Breach Records using Passport Number
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.hashQuery | Search using SHA1 hash | string | false | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Records using Passport Number |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToSpyCloudBreachRecordsFromPassportNumber |
Short Description | |
Input Entities | maltego.PassportNumber |
Output Entities | Phrase |
[SC] To Breach Records using Social Security Number
spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
spycloud.search.severity | Search Results Severity | string | any | True | True | False |
spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Display Name | [SC] To Breach Records using Social Security Number |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToSpyCloudBreachRecordsFromSocialSecurityNumber |
Short Description | |
Input Entities | maltego.IdentificationNumber |
Output Entities | Phrase |
[SC] To Bank Account Number
Display Name | [SC] To Bank Account Number |
Owner | SpyCloud |
Author | devops@spycloud.com |
Data Source | SC |
Transform Name | ToBankAccountNumberFromSpyCloudBreachRecord |
Short Description | |
Input Entities | spycloud.BreachRecord |
Output Entities | Phrase |