SpyCloud
Modified on: Wed, 12 Apr, 2023 at 3:54 PM
Overview
SpyCloud Transforms re-captured darknet data to protect businesses from cyberattacks. Its products operationalize Cybercrime Analytics (C2A) to produce actionable insights that allow enterprises to proactively prevent ransomware and account takeover, protect their business from consumer fraud losses, and investigate cybercrime incidents.
Powered by 350B+ assets, SpyCloud Investigations enables analysts to efficiently piece together decades-worth of criminals’ digital breadcrumbs to de-anonymize specific threat actors engaging in cybercrime, financial fraud, and other illegal activities.
SpyCloud customers include half of the ten largest global enterprises, mid-size companies, and government agencies around the world. Headquartered in Austin, TX, SpyCloud is home to nearly 200 cybersecurity experts whose mission is to make the internet a safer place.
You can read more about SpyCloud Transforms for Maltego on our website here.
Pricing & Access
Community Hub
Only available with Maltego Enterprise plan.
Commercial Hub
Users with a Maltego Enterprise plan have the following access options
BRING YOUR OWN KEY
Plug in your SpyCloud API key to install and use the Transforms in Maltego.
[SC] To Account Secret
| Display Name | [SC] To Account Secret |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToAccountSecretFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Alias(es)
| Display Name | [SC] To Alias(es) |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToAliasesFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Breach Type
| Display Name | [SC] To Breach Type |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToBreachTypeFromSpyCloudBreachSource |
| Short Description | |
| Input Entities | spycloud.BreachSource |
| Output Entities | Phrase |
[SC] To Breached Domain
| Display Name | [SC] To Breached Domain |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToDomainFromSpyCloudBreachSource |
| Short Description | |
| Input Entities | spycloud.BreachSource |
| Output Entities | Phrase |
[SC] To Email Domain(s)
| Display Name | [SC] To Email Domain(s) |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToEmailDomainFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Email Address(es)
| Display Name | [SC] To Email Address(es) |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToEmailFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To GPS Coordinates
| Display Name | [SC] To GPS Coordinates |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToGPSCoordinateFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To IPv4 Address(es)
| Display Name | [SC] To IPv4 Address(es) |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToIPAddressesFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Location
| Display Name | [SC] To Location |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToLocationFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
| Display Name | [SC] To Media URLs |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToMediaUrlsFromSpyCloudBreachSource |
| Short Description | |
| Input Entities | spycloud.BreachSource |
| Output Entities | Phrase |
[SC] To Password(s)
| Display Name | [SC] To Password(s) |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToPasswordsFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Person
| Display Name | [SC] To Person |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToPersonFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Phone Number
| Display Name | [SC] To Phone Number |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToPhoneNumberFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Plaintext Password
| Display Name | [SC] To Plaintext Password |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToPlaintextPasswordsFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Social Network Handle(s)
| Display Name | [SC] To Social Network Handle(s) |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSocialNetworkAliasesFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Breach Records using Username
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Username |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Short Description | |
| Output Entities | Phrase |
Variants
| ToSpyCloudBreachRecordsFromAlias | maltego.Alias |
| ToSpyCloudBreachRecordsFromBreachRecordAsUsername | spycloud.BreachRecord |
| ToSpyCloudBreachRecordsFromSocialFlickrAsUsername | maltego.affiliation.Flickr |
| ToSpyCloudBreachRecordsFromSocialTwitterAsUsername | maltego.affiliation.Twitter |
[SC] To Breach Records using Email Username
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Email Username |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Short Description | |
| Output Entities | Phrase |
Variants
| ToSpyCloudBreachRecordsFromAliasAsEmailUsername | maltego.Alias |
| ToSpyCloudBreachRecordsFromBreachRecordAsEmailUsername | spycloud.BreachRecord |
| ToSpyCloudBreachRecordsFromEmailAsEmailUsername | maltego.EmailAddress |
| ToSpyCloudBreachRecordsFromSocialFlickrAsEmailUsername | maltego.affiliation.Flickr |
| ToSpyCloudBreachRecordsFromSocialTwitterAsEmailUsername | maltego.affiliation.Twitter |
[SC] To Breach Records using Fuzzy Email Username
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Fuzzy Email Username |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Short Description | |
| Output Entities | Phrase |
Variants
| ToSpyCloudBreachRecordsFromAliasAsEmailUsernameFuzzy | maltego.Alias |
| ToSpyCloudBreachRecordsFromBreachRecordAsEmailUsernameFuzzy | spycloud.BreachRecord |
| ToSpyCloudBreachRecordsFromEmailAsEmailUsernameFuzzy | maltego.EmailAddress |
[SC] To Breach Records using Fuzzy Username
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Fuzzy Username |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Short Description | |
| Output Entities | Phrase |
Variants
| ToSpyCloudBreachRecordsFromAliasFuzzy | maltego.Alias |
| ToSpyCloudBreachRecordsFromBreachRecordAsUsernameFuzzy | spycloud.BreachRecord |
| ToSpyCloudBreachRecordsFromSocialFlickrAsUsernameFuzzy | maltego.affiliation.Flickr |
| ToSpyCloudBreachRecordsFromSocialTwitterAsUsernameFuzzy | maltego.affiliation.Twitter |
[SC] To Breach Records using DNS Name
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.type | Search Results Type | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using DNS Name |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromDNSName |
| Short Description | |
| Input Entities | maltego.DNSName |
| Output Entities | Phrase |
[SC] To Breach Records using Domain
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.type | Search Results Type | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Domain |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromDomain |
| Short Description | |
| Input Entities | maltego.Domain |
| Output Entities | Phrase |
[SC] To Breach Records using Email Address
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.hashQuery | Search using SHA1 hash | string | false | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Email Address |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromEmail |
| Short Description | |
| Input Entities | maltego.EmailAddress |
| Output Entities | Phrase |
[SC] To Breach Records using Email as Username
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Email as Username |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromEmailAsUsername |
| Short Description | |
| Input Entities | maltego.EmailAddress |
| Output Entities | Phrase |
[SC] To Breach Records using IPv4 Address
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using IPv4 Address |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromIPAddress |
| Short Description | |
| Input Entities | maltego.IPv4Address |
| Output Entities | Phrase |
[SC] To Breach Records using Netblock
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Netblock |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromNetblock |
| Short Description | |
| Input Entities | maltego.Netblock |
| Output Entities | Phrase |
[SC] To Breach Records using Phone Number
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Phone Number |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromPhoneNumber |
| Short Description | |
| Input Entities | maltego.PhoneNumber |
| Output Entities | Phrase |
[SC] To Breach Records using Plaintext Password
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Plaintext Password |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromPhrase |
| Short Description | |
| Input Entities | maltego.Phrase |
| Output Entities | Phrase |
[SC] To Breach Records using Fuzzy Plaintext Password
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Fuzzy Plaintext Password |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromPhraseFuzzy |
| Short Description | |
| Input Entities | maltego.Phrase |
| Output Entities | Phrase |
[SC] To Breach Records using Social Handle
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.type | Search Results Type | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Social Handle |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialAlias |
| Short Description | |
| Input Entities | maltego.Alias |
| Output Entities | Phrase |
[SC] To Breach Records using Fuzzy Social Handle
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.type | Search Results Type | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Fuzzy Social Handle |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialAliasFuzzy |
| Short Description | |
| Input Entities | maltego.Alias |
| Output Entities | Phrase |
[SC] To Breach Records from Social Facebook
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.type | Search Results Type | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records from Social Facebook |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialFacebook |
| Short Description | |
| Input Entities | maltego.affiliation.Facebook |
| Output Entities | Phrase |
[SC] To Breach Records Using Email Username
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records Using Email Username |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialFacebookAsEmailUsername |
| Short Description | |
| Input Entities | maltego.affiliation.Facebook |
| Output Entities | Phrase |
[SC] To Breach Records using Email Username Fuzzy
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Email Username Fuzzy |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Short Description | |
| Output Entities | Phrase |
Variants
| ToSpyCloudBreachRecordsFromSocialFacebookAsEmailUsernameFuzzy | maltego.affiliation.Facebook |
| ToSpyCloudBreachRecordsFromSocialFlickrAsEmailUsernameFuzzy | maltego.affiliation.Flickr |
[SC] To Breach Records Using Username
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records Using Username |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialFacebookAsUsername |
| Short Description | |
| Input Entities | maltego.affiliation.Facebook |
| Output Entities | Phrase |
[SC] To Breach Records Using Username Fuzzy
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records Using Username Fuzzy |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialFacebookAsUsernameFuzzy |
| Short Description | |
| Input Entities | maltego.affiliation.Facebook |
| Output Entities | Phrase |
[SC] To Breach Records from Social Facebook Fuzzy
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.type | Search Results Type | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records from Social Facebook Fuzzy |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialFacebookFuzzy |
| Short Description | |
| Input Entities | maltego.affiliation.Facebook |
| Output Entities | Phrase |
[SC] To Breach Records from Social Flickr
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.type | Search Results Type | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records from Social Flickr |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialFlickr |
| Short Description | |
| Input Entities | maltego.affiliation.Flickr |
| Output Entities | Phrase |
[SC] To Breach Records from Social Flickr Fuzzy
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.type | Search Results Type | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records from Social Flickr Fuzzy |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialFlickrFuzzy |
| Short Description | |
| Input Entities | maltego.affiliation.Flickr |
| Output Entities | Phrase |
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.type | Search Results Type | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records from Social Twitter |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialTwitter |
| Short Description | |
| Input Entities | maltego.affiliation.Twitter |
| Output Entities | Phrase |
[SC] To Breach Records Using Email Username Fuzzy
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records Using Email Username Fuzzy |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialTwitterAsEmailUsernameFuzzy |
| Short Description | |
| Input Entities | maltego.affiliation.Twitter |
| Output Entities | Phrase |
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.type | Search Results Type | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records from Social Twitter Fuzzy |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialTwitterFuzzy |
| Short Description | |
| Input Entities | maltego.affiliation.Twitter |
| Output Entities | Phrase |
[SC] To Breach Records using URL
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.type | Search Results Type | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using URL |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromURL |
| Short Description | |
| Input Entities | maltego.URL |
| Output Entities | Phrase |
[SC] To Breach Source
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Source |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Short Description | |
| Output Entities | Phrase |
Variants
| ToSpyCloudBreachSourceFromBreachID | spycloud.BreachID |
| ToSpyCloudBreachSourceFromSpyCloudBreachRecord | spycloud.BreachRecord |
[SC] To Botnet Domain
| Display Name | [SC] To Botnet Domain |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToTargetDomainFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Botnet URL
| Display Name | [SC] To Botnet URL |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToTargetURLFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To User Agent
| Display Name | [SC] To User Agent |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToUserAgentFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To User Browser
| Display Name | [SC] To User Browser |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToUserBrowserAgentFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To User Homepage
| Display Name | [SC] To User Homepage |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToUserHomepageFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To User Hostname
| Display Name | [SC] To User Hostname |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToUserHostnameFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To User O/S
| Display Name | [SC] To User O/S |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToUserOSFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To User System Registered Organization
| Display Name | [SC] To User System Registered Organization |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToUserSystemOrganizationFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To User System Registered Owner
| Display Name | [SC] To User System Registered Owner |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToUserSystemOwnerFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To User Technologies
| Display Name | [SC] To User Technologies |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToUserTechnologiesFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Breach ID
| Display Name | [SC] To Breach ID |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToBreachIDFromSpyCloudBreachSource |
| Short Description | |
| Input Entities | spycloud.BreachSource |
| Output Entities | Phrase |
[SC] To Credit Card Number
| Display Name | [SC] To Credit Card Number |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToCreditCardNumberFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Driver’s License
| Display Name | [SC] To Driver’s License |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToDriversLicenseFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Machine ID
| Display Name | [SC] To Machine ID |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToInfectedMachineIdsFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To National ID
| Display Name | [SC] To National ID |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToNationalIdsFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Passport Number
| Display Name | [SC] To Passport Number |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToPassportNumbersFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Social Security Number
| Display Name | [SC] To Social Security Number |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSocialSecurityNumberFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To User System Domain
| Display Name | [SC] To User System Domain |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToUserSystemDomainFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Breach Records using Bank Account Number
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.hashQuery | Search using SHA1 hash | string | false | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Bank Account Number |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromBankAccountNumber |
| Short Description | |
| Input Entities | maltego.BankAccount |
| Output Entities | Phrase |
[SC] To Breach Records using Credit Card Number
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Credit Card Number |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromCreditCardNumber |
| Short Description | |
| Input Entities | maltego.BankAccount |
| Output Entities | Phrase |
[SC] To Breach Records using Driver’s License
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.hashQuery | Search using SHA1 hash | string | false | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Driver’s License |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromDriversLicense |
| Short Description | |
| Input Entities | maltego.IdentificationNumber |
| Output Entities | Phrase |
[SC] To Breach Records using Machine ID
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Machine ID |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromInfectedMachineId |
| Short Description | |
| Input Entities | maltego.Computer |
| Output Entities | Phrase |
[SC] To Breach Records using National ID
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.hashQuery | Search using SHA1 hash | string | false | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using National ID |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromNationalId |
| Short Description | |
| Input Entities | maltego.IdentificationNumber |
| Output Entities | Phrase |
[SC] To Breach Records using Passport Number
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.hashQuery | Search using SHA1 hash | string | false | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Passport Number |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromPassportNumber |
| Short Description | |
| Input Entities | maltego.PassportNumber |
| Output Entities | Phrase |
[SC] To Breach Records using Social Security Number
| spycloud.api.endpoint | SpyCloud API Endpoint | string | https://api.spycloud.io/investigations-v2 | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Social Security Number |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialSecurityNumber |
| Short Description | |
| Input Entities | maltego.IdentificationNumber |
| Output Entities | Phrase |
[SC] To Bank Account Number
| Display Name | [SC] To Bank Account Number |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToBankAccountNumberFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
