Overview
Maltego with Anomali ThreatStream offers a synergistic approach to threat intelligence and analysis, empowering organizations to strengthen their cybersecurity posture.
To Cryptocurrency Addresses
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.to_cryptocurrency_addresses_from_threat_model_entities.only_internal | Search within my organization only | boolean | None | True | True | False |
| Display Name | To Cryptocurrency Addresses |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Output Entities | maltego.CryptocurrencyAddress |
Variants
| maltego.anomali.to_cryptocurrency_addresses_from_threat_model_entities_0 | Returns the associated cryptocurrency address for the input entity. | maltego.anomali.STIX2ThreatActor |
| maltego.anomali.to_cryptocurrency_addresses_from_threat_model_entities_1 | Returns the associated cryptocurrency address for the input entity. | maltego.anomali.STIX2Campaign |
| maltego.anomali.to_cryptocurrency_addresses_from_threat_model_entities_2 | Returns the associated cryptocurrency address for the input entity. | maltego.anomali.Signature |
| maltego.anomali.to_cryptocurrency_addresses_from_threat_model_entities_3 | Returns the associated cryptocurrency address for the input entity. | maltego.anomali.TTP |
| maltego.anomali.to_cryptocurrency_addresses_from_threat_model_entities_4 | Returns the associated cryptocurrency address for the input entity. | maltego.anomali.STIX2Malware |
| maltego.anomali.to_cryptocurrency_addresses_from_threat_model_entities_5 | Returns the associated cryptocurrency address for the input entity. | maltego.anomali.STIX2Report |
| maltego.anomali.to_cryptocurrency_addresses_from_threat_model_entities_6 | Returns the associated cryptocurrency address for the input entity. | maltego.anomali.STIX2Tool |
| maltego.anomali.to_cryptocurrency_addresses_from_threat_model_entities_7 | Returns the associated cryptocurrency address for the input entity. | maltego.anomali.STIX2AttackPattern |
| maltego.anomali.to_cryptocurrency_addresses_from_threat_model_entities_8 | Returns the associated cryptocurrency address for the input entity. | maltego.anomali.STIX2Incident |
| maltego.anomali.to_cryptocurrency_addresses | Returns cryptocurrency addresses with applied tag. | maltego.Tag |
To Domains
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.to_domains_from_threat_model_entities.only_internal | Search within my organization only | boolean | None | True | True | False |
| Display Name | To Domains |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Output Entities | maltego.Domain |
Variants
| maltego.anomali.to_domains_from_threat_model_entities_0 | Returns the associated domains for the input entity. | maltego.anomali.STIX2ThreatActor |
| maltego.anomali.to_domains_from_threat_model_entities_1 | Returns the associated domains for the input entity. | maltego.anomali.STIX2Campaign |
| maltego.anomali.to_domains_from_threat_model_entities_2 | Returns the associated domains for the input entity. | maltego.anomali.Signature |
| maltego.anomali.to_domains_from_threat_model_entities_3 | Returns the associated domains for the input entity. | maltego.anomali.TTP |
| maltego.anomali.to_domains_from_threat_model_entities_4 | Returns the associated domains for the input entity. | maltego.anomali.STIX2Malware |
| maltego.anomali.to_domains_from_threat_model_entities_5 | Returns the associated domains for the input entity. | maltego.anomali.STIX2Report |
| maltego.anomali.to_domains_from_threat_model_entities_6 | Returns the associated domains for the input entity. | maltego.anomali.STIX2Tool |
| maltego.anomali.to_domains_from_threat_model_entities_7 | Returns the associated domains for the input entity. | maltego.anomali.STIX2AttackPattern |
| maltego.anomali.to_domains_from_threat_model_entities_8 | Returns the associated domains for the input entity. | maltego.anomali.STIX2Incident |
| maltego.anomali.to_domains_from_tag | Returns domains with applied tag. | maltego.Tag |
To Emails
Description
Returns the associated email addresses for the input entity.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.to_emails.only_internal | Search within my organization only | boolean | None | True | True | False |
| Display Name | To Emails |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Short Description | Returns the associated email addresses for the input entity. |
| Output Entities | maltego.EmailAddress |
Variants
| maltego.anomali.to_emails_0 | maltego.anomali.STIX2ThreatActor |
| maltego.anomali.to_emails_1 | maltego.anomali.STIX2Campaign |
| maltego.anomali.to_emails_2 | maltego.anomali.Signature |
| maltego.anomali.to_emails_3 | maltego.anomali.TTP |
| maltego.anomali.to_emails_4 | maltego.anomali.STIX2Malware |
| maltego.anomali.to_emails_5 | maltego.anomali.STIX2Report |
| maltego.anomali.to_emails_6 | maltego.anomali.STIX2Tool |
| maltego.anomali.to_emails_7 | maltego.anomali.STIX2AttackPattern |
| maltego.anomali.to_emails_8 | maltego.anomali.STIX2Incident |
To Hashes
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.to_hashes.only_internal | Search within my organization only | boolean | None | True | True | False |
| Display Name | To Hashes |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Output Entities | maltego.Hash |
Variants
| maltego.anomali.to_hashes_0 | Returns the associated hashes for the input entity. | maltego.anomali.STIX2ThreatActor |
| maltego.anomali.to_hashes_1 | Returns the associated hashes for the input entity. | maltego.anomali.STIX2Campaign |
| maltego.anomali.to_hashes_2 | Returns the associated hashes for the input entity. | maltego.anomali.Signature |
| maltego.anomali.to_hashes_3 | Returns the associated hashes for the input entity. | maltego.anomali.TTP |
| maltego.anomali.to_hashes_4 | Returns the associated hashes for the input entity. | maltego.anomali.STIX2Malware |
| maltego.anomali.to_hashes_5 | Returns the associated hashes for the input entity. | maltego.anomali.STIX2Report |
| maltego.anomali.to_hashes_6 | Returns the associated hashes for the input entity. | maltego.anomali.STIX2Tool |
| maltego.anomali.to_hashes_7 | Returns the associated hashes for the input entity. | maltego.anomali.STIX2AttackPattern |
| maltego.anomali.to_hashes_8 | Returns the associated hashes for the input entity. | maltego.anomali.STIX2Incident |
| maltego.anomali.to_hashes_from_tag | Returns hashes with applied tag. | maltego.Tag |
To IP Addresses
Description
Returns the associated IP addresses for the input entity.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.to_ip_addresses.only_internal | Search within my organization only | boolean | None | True | True | False |
| Display Name | To IP Addresses |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Short Description | Returns the associated IP addresses for the input entity. |
| Output Entities | maltego.IPv4Address, maltego.IPv6Address |
Variants
| maltego.anomali.to_ip_addresses_0 | maltego.anomali.STIX2ThreatActor |
| maltego.anomali.to_ip_addresses_1 | maltego.anomali.STIX2Campaign |
| maltego.anomali.to_ip_addresses_2 | maltego.anomali.Signature |
| maltego.anomali.to_ip_addresses_3 | maltego.anomali.TTP |
| maltego.anomali.to_ip_addresses_4 | maltego.anomali.STIX2Malware |
| maltego.anomali.to_ip_addresses_5 | maltego.anomali.STIX2Report |
| maltego.anomali.to_ip_addresses_6 | maltego.anomali.STIX2Tool |
| maltego.anomali.to_ip_addresses_7 | maltego.anomali.STIX2AttackPattern |
| maltego.anomali.to_ip_addresses_8 | maltego.anomali.STIX2Incident |
To URLs
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.to_urls.only_internal | Search within my organization only | boolean | None | True | True | False |
| Display Name | To URLs |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Output Entities | maltego.URL |
Variants
| maltego.anomali.to_urls_0 | Returns the associated URLs for the input entity. | maltego.anomali.STIX2ThreatActor |
| maltego.anomali.to_urls_1 | Returns the associated URLs for the input entity. | maltego.anomali.STIX2Campaign |
| maltego.anomali.to_urls_2 | Returns the associated URLs for the input entity. | maltego.anomali.Signature |
| maltego.anomali.to_urls_3 | Returns the associated URLs for the input entity. | maltego.anomali.TTP |
| maltego.anomali.to_urls_4 | Returns the associated URLs for the input entity. | maltego.anomali.STIX2Malware |
| maltego.anomali.to_urls_5 | Returns the associated URLs for the input entity. | maltego.anomali.STIX2Report |
| maltego.anomali.to_urls_6 | Returns the associated URLs for the input entity. | maltego.anomali.STIX2Tool |
| maltego.anomali.to_urls_7 | Returns the associated URLs for the input entity. | maltego.anomali.STIX2AttackPattern |
| maltego.anomali.to_urls_8 | Returns the associated URLs for the input entity. | maltego.anomali.STIX2Incident |
| maltego.anomali.to_urls_from_tag | Returns URLs with applied tag. | maltego.Tag |
To Other IOCs
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.to_other_iocs.only_internal | Search within my organization only | boolean | None | True | True | False |
| Display Name | To Other IOCs |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Output Entities | maltego.anomali.IOC |
Variants
| maltego.anomali.to_other_iocs_0 | Returns the associated anomali IOCs for the input entity. | maltego.anomali.STIX2ThreatActor |
| maltego.anomali.to_other_iocs_1 | Returns the associated anomali IOCs for the input entity. | maltego.anomali.STIX2Campaign |
| maltego.anomali.to_other_iocs_2 | Returns the associated anomali IOCs for the input entity. | maltego.anomali.Signature |
| maltego.anomali.to_other_iocs_3 | Returns the associated anomali IOCs for the input entity. | maltego.anomali.TTP |
| maltego.anomali.to_other_iocs_4 | Returns the associated anomali IOCs for the input entity. | maltego.anomali.STIX2Malware |
| maltego.anomali.to_other_iocs_5 | Returns the associated anomali IOCs for the input entity. | maltego.anomali.STIX2Report |
| maltego.anomali.to_other_iocs_6 | Returns the associated anomali IOCs for the input entity. | maltego.anomali.STIX2Tool |
| maltego.anomali.to_other_iocs_7 | Returns the associated anomali IOCs for the input entity. | maltego.anomali.STIX2AttackPattern |
| maltego.anomali.to_other_iocs_8 | Returns the associated anomali IOCs for the input entity. | maltego.anomali.STIX2Incident |
| maltego.anomali.to_other_iocs_from_tag | Returns Anomali IOCs with applied tag. | maltego.Tag |
To IOCs (using search filter)
Description
Returns the observed IOCs that fit the search filter.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.to_iocs_using_search_filter.modified | Modified | daterange | None | True | True | False |
| maltego.anomali.to_iocs_using_search_filter.only_internal | Search within my organization only | boolean | None | True | True | False |
| maltego.anomali.to_iocs_using_search_filter.search_filter | Anomali Search Filter ID | string | None | True | True | False |
| maltego.anomali.to_iocs_using_search_filter.status | Status | string | None | True | True | False |
| Display Name | To IOCs (using search filter) |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Short Description | Returns the observed IOCs that fit the search filter. |
| Output Entities | maltego.anomali.IOC, maltego.Hash, maltego.EmailAddress, maltego.CryptocurrencyAddress, maltego.IPv4Address, maltego.IPv6Address, maltego.Domain, maltego.URL |
Variants
| maltego.anomali.to_iocs_using_search_filter_0 | maltego.anomali.STIX2ThreatActor |
| maltego.anomali.to_iocs_using_search_filter_1 | maltego.anomali.STIX2Campaign |
| maltego.anomali.to_iocs_using_search_filter_2 | maltego.anomali.Signature |
| maltego.anomali.to_iocs_using_search_filter_3 | maltego.anomali.TTP |
| maltego.anomali.to_iocs_using_search_filter_4 | maltego.anomali.STIX2Malware |
| maltego.anomali.to_iocs_using_search_filter_5 | maltego.anomali.STIX2Report |
| maltego.anomali.to_iocs_using_search_filter_6 | maltego.anomali.STIX2Tool |
| maltego.anomali.to_iocs_using_search_filter_7 | maltego.anomali.STIX2AttackPattern |
| maltego.anomali.to_iocs_using_search_filter_8 | maltego.anomali.STIX2Incident |
To ASN
Description
Returns AS number of the input observable.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.to_asn.modified | Modified | daterange | None | True | True | False |
| maltego.anomali.to_asn.only_internal | Search within my organization only | boolean | None | True | True | False |
| maltego.anomali.to_asn.status | Status | string | None | True | True | False |
| Display Name | To ASN |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Short Description | Returns AS number of the input observable. |
| Output Entities | maltego.AS |
Variants
| maltego.anomali.to_asn_0 | maltego.URL |
| maltego.anomali.to_asn_1 | maltego.IPv4Address |
| maltego.anomali.to_asn_2 | maltego.IPv6Address |
| maltego.anomali.to_asn_3 | maltego.Domain |
To IP Address
Description
Returns IP address of the input observables.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.to_ip_address.modified | Modified | daterange | None | True | True | False |
| maltego.anomali.to_ip_address.only_internal | Search within my organization only | boolean | None | True | True | False |
| maltego.anomali.to_ip_address.status | Status | string | None | True | True | False |
| Display Name | To IP Address |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Short Description | Returns IP address of the input observables. |
| Output Entities | maltego.IPv4Address, maltego.IPv6Address |
Variants
| maltego.anomali.to_ip_address_0 | maltego.URL |
| maltego.anomali.to_ip_address_1 | maltego.IPv4Address |
| maltego.anomali.to_ip_address_2 | maltego.IPv6Address |
| maltego.anomali.to_ip_address_3 | maltego.Domain |
To Location
Description
Returns location of the input observables.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.to_location.modified | Modified | daterange | None | True | True | False |
| maltego.anomali.to_location.only_internal | Search within my organization only | boolean | None | True | True | False |
| maltego.anomali.to_location.status | Status | string | None | True | True | False |
| Display Name | To Location |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Short Description | Returns location of the input observables. |
| Output Entities | maltego.Location |
Variants
| maltego.anomali.to_location_0 | maltego.URL |
| maltego.anomali.to_location_1 | maltego.IPv4Address |
| maltego.anomali.to_location_2 | maltego.IPv6Address |
| maltego.anomali.to_location_3 | maltego.Domain |
To Organization
Description
Returns organization of the input observables.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.to_organization.modified | Modified | daterange | None | True | True | False |
| maltego.anomali.to_organization.only_internal | Search within my organization only | boolean | None | True | True | False |
| maltego.anomali.to_organization.status | Status | string | None | True | True | False |
| Display Name | To Organization |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Short Description | Returns organization of the input observables. |
| Output Entities | maltego.Company |
Variants
| maltego.anomali.to_organization_0 | maltego.URL |
| maltego.anomali.to_organization_1 | maltego.IPv4Address |
| maltego.anomali.to_organization_2 | maltego.IPv6Address |
| maltego.anomali.to_organization_3 | maltego.Domain |
Description
Returns indicator of input entity.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.to_metadata_information.modified | Modified | daterange | None | True | True | False |
| maltego.anomali.to_metadata_information.only_internal | Search within my organization only | boolean | None | True | True | False |
| maltego.anomali.to_metadata_information.status | Status | string | None | True | True | False |
| Display Name | To Metadata Information (STIX2 Indicator) |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Short Description | Returns indicator of input entity. |
| Output Entities | maltego.anomali.STIX2Indicator |
Variants
| maltego.anomali.to_metadata_information_0 | maltego.Domain |
| maltego.anomali.to_metadata_information_1 | maltego.EmailAddress |
| maltego.anomali.to_metadata_information_2 | maltego.IPv4Address |
| maltego.anomali.to_metadata_information_3 | maltego.IPv6Address |
| maltego.anomali.to_metadata_information_4 | maltego.URL |
| maltego.anomali.to_metadata_information_5 | maltego.Hash |
| maltego.anomali.to_metadata_information_6 | maltego.CryptocurrencyAddress |
| maltego.anomali.to_metadata_information_7 | maltego.anomali.IOC |
To IOCs
Description
Returns IOCs for given search filter.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.to_iocs.modified | Modified | daterange | None | True | True | False |
| maltego.anomali.to_iocs.only_internal | Search within my organization only | boolean | None | True | True | False |
| maltego.anomali.to_iocs.status | Status | string | None | True | True | False |
| Display Name | To IOCs |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Transform Name | maltego.anomali.to_iocs |
| Short Description | Returns IOCs for given search filter. |
| Input Entities | maltego.anomali.SearchFilter |
| Output Entities | maltego.anomali.IOC, maltego.Hash, maltego.EmailAddress, maltego.CryptocurrencyAddress, maltego.IPv4Address, maltego.IPv6Address, maltego.Domain, maltego.URL |
To Email Addresses
Description
Returns email addresses with applied tag.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.to_email_addresses.modified | Modified | daterange | None | True | True | False |
| maltego.anomali.to_email_addresses.only_internal | Search within my organization only | boolean | None | True | True | False |
| maltego.anomali.to_email_addresses.status | Status | string | None | True | True | False |
| Display Name | To Email Addresses |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Transform Name | maltego.anomali.to_email_addresses |
| Short Description | Returns email addresses with applied tag. |
| Input Entities | maltego.Tag |
| Output Entities | maltego.EmailAddress |
To IPv6 Addresses
Description
Returns IPv6 addresses with applied tag.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.to_ipv6_addresses_from_tag.modified | Modified | daterange | None | True | True | False |
| maltego.anomali.to_ipv6_addresses_from_tag.only_internal | Search within my organization only | boolean | None | True | True | False |
| maltego.anomali.to_ipv6_addresses_from_tag.status | Status | string | None | True | True | False |
| Display Name | To IPv6 Addresses |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Transform Name | maltego.anomali.to_ipv6_addresses_from_tag |
| Short Description | Returns IPv6 addresses with applied tag. |
| Input Entities | maltego.Tag |
| Output Entities | maltego.IPv6Address |
To IPv4 Addresses
Description
Returns IPv4 addresses with applied tag.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.to_ipv4_addresses_from_tag.modified | Modified | daterange | None | True | True | False |
| maltego.anomali.to_ipv4_addresses_from_tag.only_internal | Search within my organization only | boolean | None | True | True | False |
| maltego.anomali.to_ipv4_addresses_from_tag.status | Status | string | None | True | True | False |
| Display Name | To IPv4 Addresses |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Transform Name | maltego.anomali.to_ipv4_addresses_from_tag |
| Short Description | Returns IPv4 addresses with applied tag. |
| Input Entities | maltego.Tag |
| Output Entities | maltego.IPv4Address |
To Usernames
Description
Returns the usernames of the threat actor.
| Display Name | To Usernames |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Transform Name | maltego.anomali.to_usernames |
| Short Description | Returns the usernames of the threat actor. |
| Input Entities | maltego.anomali.STIX2ThreatActor |
| Output Entities | maltego.Alias |
Description
Returns the applied tags for the input entity.
| Display Name | To Tags |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Short Description | Returns the applied tags for the input entity. |
| Output Entities | maltego.Tag |
Variants
| maltego.anomali.to_tags_from_threat_model_entities_0 | maltego.anomali.STIX2ThreatActor |
| maltego.anomali.to_tags_from_threat_model_entities_1 | maltego.anomali.STIX2Campaign |
| maltego.anomali.to_tags_from_threat_model_entities_2 | maltego.anomali.Signature |
| maltego.anomali.to_tags_from_threat_model_entities_3 | maltego.anomali.TTP |
| maltego.anomali.to_tags_from_threat_model_entities_4 | maltego.anomali.STIX2Malware |
| maltego.anomali.to_tags_from_threat_model_entities_5 | maltego.anomali.STIX2Report |
| maltego.anomali.to_tags_from_threat_model_entities_6 | maltego.anomali.STIX2Tool |
| maltego.anomali.to_tags_from_threat_model_entities_7 | maltego.anomali.STIX2AttackPattern |
Search Threat Actor by IOC
Description
Returns the associated STIX2 threat actors for the input IOC entity.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.search_threat_actor_by_ioc.only_internal | Search within my organization only | boolean | None | True | True | False |
| Display Name | Search Threat Actor by IOC |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Short Description | Returns the associated STIX2 threat actors for the input IOC entity. |
| Output Entities | maltego.anomali.STIX2ThreatActor |
Variants
| maltego.anomali.search_threat_actor_by_ioc_0 | maltego.Domain |
| maltego.anomali.search_threat_actor_by_ioc_1 | maltego.EmailAddress |
| maltego.anomali.search_threat_actor_by_ioc_2 | maltego.IPv4Address |
| maltego.anomali.search_threat_actor_by_ioc_3 | maltego.IPv6Address |
| maltego.anomali.search_threat_actor_by_ioc_4 | maltego.URL |
| maltego.anomali.search_threat_actor_by_ioc_5 | maltego.Hash |
| maltego.anomali.search_threat_actor_by_ioc_6 | maltego.CryptocurrencyAddress |
| maltego.anomali.search_threat_actor_by_ioc_7 | maltego.anomali.IOC |
| maltego.anomali.search_threat_actor_by_ioc_8 | maltego.anomali.STIX2Indicator |
Search Threat Campaign by IOC
Description
Returns the associated STIX2 campaigns for the input IOC entity.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.search_threat_campaign_by_ioc.only_internal | Search within my organization only | boolean | None | True | True | False |
| Display Name | Search Threat Campaign by IOC |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Short Description | Returns the associated STIX2 campaigns for the input IOC entity. |
| Output Entities | maltego.anomali.STIX2Campaign |
Variants
| maltego.anomali.search_threat_campaign_by_ioc_0 | maltego.Domain |
| maltego.anomali.search_threat_campaign_by_ioc_1 | maltego.EmailAddress |
| maltego.anomali.search_threat_campaign_by_ioc_2 | maltego.IPv4Address |
| maltego.anomali.search_threat_campaign_by_ioc_3 | maltego.IPv6Address |
| maltego.anomali.search_threat_campaign_by_ioc_4 | maltego.URL |
| maltego.anomali.search_threat_campaign_by_ioc_5 | maltego.Hash |
| maltego.anomali.search_threat_campaign_by_ioc_6 | maltego.CryptocurrencyAddress |
| maltego.anomali.search_threat_campaign_by_ioc_7 | maltego.anomali.IOC |
| maltego.anomali.search_threat_campaign_by_ioc_8 | maltego.anomali.STIX2Indicator |
Search Threat Malware by IOC
Description
Returns the associated STIX2 malware for the input IOC entity.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.search_threat_malware_by_ioc.only_internal | Search within my organization only | boolean | None | True | True | False |
| Display Name | Search Threat Malware by IOC |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Short Description | Returns the associated STIX2 malware for the input IOC entity. |
| Output Entities | maltego.anomali.STIX2Malware |
Variants
| maltego.anomali.search_threat_malware_by_ioc_0 | maltego.Domain |
| maltego.anomali.search_threat_malware_by_ioc_1 | maltego.EmailAddress |
| maltego.anomali.search_threat_malware_by_ioc_2 | maltego.IPv4Address |
| maltego.anomali.search_threat_malware_by_ioc_3 | maltego.IPv6Address |
| maltego.anomali.search_threat_malware_by_ioc_4 | maltego.URL |
| maltego.anomali.search_threat_malware_by_ioc_5 | maltego.Hash |
| maltego.anomali.search_threat_malware_by_ioc_6 | maltego.CryptocurrencyAddress |
| maltego.anomali.search_threat_malware_by_ioc_7 | maltego.anomali.IOC |
| maltego.anomali.search_threat_malware_by_ioc_8 | maltego.anomali.STIX2Indicator |
Search Threat Report by IOC
Description
Returns the associated STIX2 threat reports for the input IOC entity.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.search_threat_report_by_ioc.only_internal | Search within my organization only | boolean | None | True | True | False |
| Display Name | Search Threat Report by IOC |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Short Description | Returns the associated STIX2 threat reports for the input IOC entity. |
| Output Entities | maltego.anomali.STIX2Report |
Variants
| maltego.anomali.search_threat_report_by_ioc_0 | maltego.Domain |
| maltego.anomali.search_threat_report_by_ioc_1 | maltego.EmailAddress |
| maltego.anomali.search_threat_report_by_ioc_2 | maltego.IPv4Address |
| maltego.anomali.search_threat_report_by_ioc_3 | maltego.IPv6Address |
| maltego.anomali.search_threat_report_by_ioc_4 | maltego.URL |
| maltego.anomali.search_threat_report_by_ioc_5 | maltego.Hash |
| maltego.anomali.search_threat_report_by_ioc_6 | maltego.CryptocurrencyAddress |
| maltego.anomali.search_threat_report_by_ioc_7 | maltego.anomali.IOC |
| maltego.anomali.search_threat_report_by_ioc_8 | maltego.anomali.STIX2Indicator |
Search Threat Signature by IOC
Description
Returns the associated STIX2 signatures for the input IOC entity.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.search_threat_signature_by_ioc.only_internal | Search within my organization only | boolean | None | True | True | False |
| Display Name | Search Threat Signature by IOC |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Short Description | Returns the associated STIX2 signatures for the input IOC entity. |
| Output Entities | maltego.anomali.Signature |
Variants
| maltego.anomali.search_threat_signature_by_ioc_0 | maltego.Domain |
| maltego.anomali.search_threat_signature_by_ioc_1 | maltego.EmailAddress |
| maltego.anomali.search_threat_signature_by_ioc_2 | maltego.IPv4Address |
| maltego.anomali.search_threat_signature_by_ioc_3 | maltego.IPv6Address |
| maltego.anomali.search_threat_signature_by_ioc_4 | maltego.URL |
| maltego.anomali.search_threat_signature_by_ioc_5 | maltego.Hash |
| maltego.anomali.search_threat_signature_by_ioc_6 | maltego.CryptocurrencyAddress |
| maltego.anomali.search_threat_signature_by_ioc_7 | maltego.anomali.IOC |
| maltego.anomali.search_threat_signature_by_ioc_8 | maltego.anomali.STIX2Indicator |
Search Threat TTP by IOC
Description
Returns the observed TTPs for the input IOC entity.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.search_threat_ttp_by_ioc.only_internal | Search within my organization only | boolean | None | True | True | False |
| Display Name | Search Threat TTP by IOC |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Short Description | Returns the observed TTPs for the input IOC entity. |
| Output Entities | maltego.anomali.TTP |
Variants
| maltego.anomali.search_threat_ttp_by_ioc_0 | maltego.Domain |
| maltego.anomali.search_threat_ttp_by_ioc_1 | maltego.EmailAddress |
| maltego.anomali.search_threat_ttp_by_ioc_2 | maltego.IPv4Address |
| maltego.anomali.search_threat_ttp_by_ioc_3 | maltego.IPv6Address |
| maltego.anomali.search_threat_ttp_by_ioc_4 | maltego.URL |
| maltego.anomali.search_threat_ttp_by_ioc_5 | maltego.Hash |
| maltego.anomali.search_threat_ttp_by_ioc_6 | maltego.CryptocurrencyAddress |
| maltego.anomali.search_threat_ttp_by_ioc_7 | maltego.anomali.IOC |
| maltego.anomali.search_threat_ttp_by_ioc_8 | maltego.anomali.STIX2Indicator |
Search Incidents
Description
Returns the associated STIX2 incidents for the input entity.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.search_incidents.modified | Modified | daterange | None | True | True | False |
| maltego.anomali.search_incidents.only_internal | Search within my organization only | boolean | None | True | True | False |
| maltego.anomali.search_incidents.status | Status | string | None | True | True | False |
| Display Name | Search Incidents |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Short Description | Returns the associated STIX2 incidents for the input entity. |
| Output Entities | maltego.anomali.STIX2Incident |
Variants
| maltego.anomali.search_incidents_0 | maltego.Phrase |
| maltego.anomali.search_incidents_1 | maltego.Incident |
Search Campaigns
Description
Returns the associated STIX2 campaigns for the input entity.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.search_campaigns.modified | Modified | daterange | None | True | True | False |
| maltego.anomali.search_campaigns.only_internal | Search within my organization only | boolean | None | True | True | False |
| maltego.anomali.search_campaigns.status | Status | string | None | True | True | False |
| Display Name | Search Campaigns |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Short Description | Returns the associated STIX2 campaigns for the input entity. |
| Output Entities | maltego.anomali.STIX2Campaign |
Variants
| maltego.anomali.search_campaigns_0 | maltego.Phrase |
| maltego.anomali.search_campaigns_1 | maltego.STIX2.campaign |
Search Threat Actors
Description
Returns the associated STIX2 threat actors for the input entity.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.search_threat_actors.modified | Modified | daterange | None | True | True | False |
| maltego.anomali.search_threat_actors.only_internal | Search within my organization only | boolean | None | True | True | False |
| maltego.anomali.search_threat_actors.status | Status | string | None | True | True | False |
| Display Name | Search Threat Actors |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Short Description | Returns the associated STIX2 threat actors for the input entity. |
| Output Entities | maltego.anomali.STIX2ThreatActor |
Variants
| maltego.anomali.search_threat_actors_0 | maltego.Phrase |
| maltego.anomali.search_threat_actors_1 | maltego.Organization |
| maltego.anomali.search_threat_actors_2 | maltego.Person |
| maltego.anomali.search_threat_actors_3 | maltego.Alias |
| maltego.anomali.search_threat_actors_4 | maltego.STIX2.threat-actor |
| maltego.anomali.search_threat_actors_5 | misp.ThreatActor |
Search Threat Reports
Description
Returns the associated STIX2 threat reports for the input entity.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.search_threat_reports.modified | Modified | daterange | None | True | True | False |
| maltego.anomali.search_threat_reports.only_internal | Search within my organization only | boolean | None | True | True | False |
| maltego.anomali.search_threat_reports.status | Status | string | None | True | True | False |
| Display Name | Search Threat Reports |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Short Description | Returns the associated STIX2 threat reports for the input entity. |
| Output Entities | maltego.anomali.STIX2Report |
Variants
| maltego.anomali.search_threat_reports_0 | maltego.Phrase |
| maltego.anomali.search_threat_reports_1 | maltego.STIX2.report |
Search TTPs
Description
Returns the anomali TTPs for the input entity.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.search_ttps.modified | Modified | daterange | None | True | True | False |
| maltego.anomali.search_ttps.only_internal | Search within my organization only | boolean | None | True | True | False |
| maltego.anomali.search_ttps.status | Status | string | None | True | True | False |
| Display Name | Search TTPs |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Short Description | Returns the anomali TTPs for the input entity. |
| Output Entities | maltego.anomali.TTP |
Variants
| maltego.anomali.search_ttps_0 | maltego.Phrase |
| maltego.anomali.search_ttps_1 | maltego.TTP |
Search Attack Patterns
Description
Returns the associated STIX2 attack patterns for the input entity.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.search_attack_patterns.modified | Modified | daterange | None | True | True | False |
| maltego.anomali.search_attack_patterns.only_internal | Search within my organization only | boolean | None | True | True | False |
| maltego.anomali.search_attack_patterns.status | Status | string | None | True | True | False |
| Display Name | Search Attack Patterns |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Short Description | Returns the associated STIX2 attack patterns for the input entity. |
| Output Entities | maltego.anomali.STIX2AttackPattern |
Variants
| maltego.anomali.search_attack_patterns_0 | maltego.Phrase |
| maltego.anomali.search_attack_patterns_1 | maltego.AttackPattern |
| maltego.anomali.search_attack_patterns_2 | maltego.STIX2.attack-pattern |
| maltego.anomali.search_attack_patterns_3 | misp.AttackTechnique |
Search Signatures
Description
Returns the associated STIX2 signatures for the input entity.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.search_signatures.modified | Modified | daterange | None | True | True | False |
| maltego.anomali.search_signatures.only_internal | Search within my organization only | boolean | None | True | True | False |
| maltego.anomali.search_signatures.status | Status | string | None | True | True | False |
| Display Name | Search Signatures |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Short Description | Returns the associated STIX2 signatures for the input entity. |
| Output Entities | maltego.anomali.Signature |
Variants
| maltego.anomali.search_signatures_0 | maltego.Phrase |
| maltego.anomali.search_signatures_1 | maltego.MalwareSignature |
Search Malware
Description
Returns the associated STIX2 malware for the input entity.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.search_malware.modified | Modified | daterange | None | True | True | False |
| maltego.anomali.search_malware.only_internal | Search within my organization only | boolean | None | True | True | False |
| maltego.anomali.search_malware.status | Status | string | None | True | True | False |
| Display Name | Search Malware |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Short Description | Returns the associated STIX2 malware for the input entity. |
| Output Entities | maltego.anomali.STIX2Malware |
Variants
| maltego.anomali.search_malware_0 | maltego.Phrase |
| maltego.anomali.search_malware_1 | maltego.Malware |
| maltego.anomali.search_malware_2 | maltego.STIX2.malware |
| maltego.anomali.search_malware_3 | misp.Software |
Description
Returns the associated STIX2 tools for the input entity.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.search_tools.modified | Modified | daterange | None | True | True | False |
| maltego.anomali.search_tools.only_internal | Search within my organization only | boolean | None | True | True | False |
| maltego.anomali.search_tools.status | Status | string | None | True | True | False |
| Display Name | Search Tools |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Short Description | Returns the associated STIX2 tools for the input entity. |
| Output Entities | maltego.anomali.STIX2Tool |
Variants
| maltego.anomali.search_tools_0 | maltego.Phrase |
| maltego.anomali.search_tools_1 | maltego.STIX2.tool |
| maltego.anomali.search_tools_2 | misp.Software |
To Attack Patterns
Description
Returns the associated STIX2 attack patterns for the input entity.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.to_attack_patterns.only_internal | Search within my organization only | boolean | None | True | True | False |
| Display Name | To Attack Patterns |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Short Description | Returns the associated STIX2 attack patterns for the input entity. |
| Output Entities | maltego.anomali.STIX2AttackPattern |
Variants
| maltego.anomali.to_attack_patterns_0 | maltego.anomali.STIX2ThreatActor |
| maltego.anomali.to_attack_patterns_1 | maltego.anomali.STIX2Campaign |
| maltego.anomali.to_attack_patterns_2 | maltego.anomali.Signature |
| maltego.anomali.to_attack_patterns_3 | maltego.anomali.TTP |
| maltego.anomali.to_attack_patterns_4 | maltego.anomali.STIX2Malware |
| maltego.anomali.to_attack_patterns_5 | maltego.anomali.STIX2Report |
| maltego.anomali.to_attack_patterns_6 | maltego.anomali.STIX2Tool |
| maltego.anomali.to_attack_patterns_7 | maltego.anomali.STIX2AttackPattern |
| maltego.anomali.to_attack_patterns_8 | maltego.anomali.STIX2Incident |
To Campaigns
Description
Returns the associated STIX2 campaigns for the input entity.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.to_campaigns.only_internal | Search within my organization only | boolean | None | True | True | False |
| Display Name | To Campaigns |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Short Description | Returns the associated STIX2 campaigns for the input entity. |
| Output Entities | maltego.anomali.STIX2Campaign |
Variants
| maltego.anomali.to_campaigns_0 | maltego.anomali.STIX2ThreatActor |
| maltego.anomali.to_campaigns_1 | maltego.anomali.STIX2Campaign |
| maltego.anomali.to_campaigns_2 | maltego.anomali.Signature |
| maltego.anomali.to_campaigns_3 | maltego.anomali.TTP |
| maltego.anomali.to_campaigns_4 | maltego.anomali.STIX2Malware |
| maltego.anomali.to_campaigns_5 | maltego.anomali.STIX2Report |
| maltego.anomali.to_campaigns_6 | maltego.anomali.STIX2Tool |
| maltego.anomali.to_campaigns_7 | maltego.anomali.STIX2AttackPattern |
| maltego.anomali.to_campaigns_8 | maltego.anomali.STIX2Incident |
To Incidents
Description
Returns the associated STIX2 incidents for the input entity.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.to_incidents.only_internal | Search within my organization only | boolean | None | True | True | False |
| Display Name | To Incidents |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Short Description | Returns the associated STIX2 incidents for the input entity. |
| Output Entities | maltego.anomali.STIX2Incident |
Variants
| maltego.anomali.to_incidents_0 | maltego.anomali.STIX2ThreatActor |
| maltego.anomali.to_incidents_1 | maltego.anomali.STIX2Campaign |
| maltego.anomali.to_incidents_2 | maltego.anomali.Signature |
| maltego.anomali.to_incidents_3 | maltego.anomali.TTP |
| maltego.anomali.to_incidents_4 | maltego.anomali.STIX2Malware |
| maltego.anomali.to_incidents_5 | maltego.anomali.STIX2Report |
| maltego.anomali.to_incidents_6 | maltego.anomali.STIX2Tool |
| maltego.anomali.to_incidents_7 | maltego.anomali.STIX2AttackPattern |
| maltego.anomali.to_incidents_8 | maltego.anomali.STIX2Incident |
To Malware
Description
Returns the associated STIX2 malware for the input entity.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.to_malware.only_internal | Search within my organization only | boolean | None | True | True | False |
| Display Name | To Malware |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Short Description | Returns the associated STIX2 malware for the input entity. |
| Output Entities | maltego.anomali.STIX2Malware |
Variants
| maltego.anomali.to_malware_0 | maltego.anomali.STIX2ThreatActor |
| maltego.anomali.to_malware_1 | maltego.anomali.STIX2Campaign |
| maltego.anomali.to_malware_2 | maltego.anomali.Signature |
| maltego.anomali.to_malware_3 | maltego.anomali.TTP |
| maltego.anomali.to_malware_4 | maltego.anomali.STIX2Malware |
| maltego.anomali.to_malware_5 | maltego.anomali.STIX2Report |
| maltego.anomali.to_malware_6 | maltego.anomali.STIX2Tool |
| maltego.anomali.to_malware_7 | maltego.anomali.STIX2AttackPattern |
| maltego.anomali.to_malware_8 | maltego.anomali.STIX2Incident |
To Signatures
Description
Returns the associated STIX2 signatures for the input entity.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.to_signatures.only_internal | Search within my organization only | boolean | None | True | True | False |
| Display Name | To Signatures |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Short Description | Returns the associated STIX2 signatures for the input entity. |
| Output Entities | maltego.anomali.Signature |
Variants
| maltego.anomali.to_signatures_0 | maltego.anomali.STIX2ThreatActor |
| maltego.anomali.to_signatures_1 | maltego.anomali.STIX2Campaign |
| maltego.anomali.to_signatures_2 | maltego.anomali.Signature |
| maltego.anomali.to_signatures_3 | maltego.anomali.TTP |
| maltego.anomali.to_signatures_4 | maltego.anomali.STIX2Malware |
| maltego.anomali.to_signatures_5 | maltego.anomali.STIX2Report |
| maltego.anomali.to_signatures_6 | maltego.anomali.STIX2Tool |
| maltego.anomali.to_signatures_7 | maltego.anomali.STIX2AttackPattern |
| maltego.anomali.to_signatures_8 | maltego.anomali.STIX2Incident |
To Threat Reports
Description
Returns the associated STIX2 threat reports for the input entity.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.to_threat_reports.only_internal | Search within my organization only | boolean | None | True | True | False |
| Display Name | To Threat Reports |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Short Description | Returns the associated STIX2 threat reports for the input entity. |
| Output Entities | maltego.anomali.STIX2Report |
Variants
| maltego.anomali.to_threat_reports_0 | maltego.anomali.STIX2ThreatActor |
| maltego.anomali.to_threat_reports_1 | maltego.anomali.STIX2Campaign |
| maltego.anomali.to_threat_reports_2 | maltego.anomali.Signature |
| maltego.anomali.to_threat_reports_3 | maltego.anomali.TTP |
| maltego.anomali.to_threat_reports_4 | maltego.anomali.STIX2Malware |
| maltego.anomali.to_threat_reports_5 | maltego.anomali.STIX2Report |
| maltego.anomali.to_threat_reports_6 | maltego.anomali.STIX2Tool |
| maltego.anomali.to_threat_reports_7 | maltego.anomali.STIX2AttackPattern |
Description
Returns the associated STIX2 tools for the input entity.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.to_tools.only_internal | Search within my organization only | boolean | None | True | True | False |
| Display Name | To Tools |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Short Description | Returns the associated STIX2 tools for the input entity. |
| Output Entities | maltego.anomali.STIX2Tool |
Variants
| maltego.anomali.to_tools_0 | maltego.anomali.STIX2ThreatActor |
| maltego.anomali.to_tools_1 | maltego.anomali.STIX2Campaign |
| maltego.anomali.to_tools_2 | maltego.anomali.Signature |
| maltego.anomali.to_tools_3 | maltego.anomali.TTP |
| maltego.anomali.to_tools_4 | maltego.anomali.STIX2Malware |
| maltego.anomali.to_tools_5 | maltego.anomali.STIX2Report |
| maltego.anomali.to_tools_6 | maltego.anomali.STIX2Tool |
| maltego.anomali.to_tools_7 | maltego.anomali.STIX2AttackPattern |
To TTPs
Description
Returns the associated observed TTPs for the input entity.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.to_ttps.only_internal | Search within my organization only | boolean | None | True | True | False |
| Display Name | To TTPs |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Short Description | Returns the associated observed TTPs for the input entity. |
| Output Entities | maltego.anomali.TTP |
Variants
| maltego.anomali.to_ttps_0 | maltego.anomali.STIX2ThreatActor |
| maltego.anomali.to_ttps_1 | maltego.anomali.STIX2Campaign |
| maltego.anomali.to_ttps_2 | maltego.anomali.Signature |
| maltego.anomali.to_ttps_3 | maltego.anomali.TTP |
| maltego.anomali.to_ttps_4 | maltego.anomali.STIX2Malware |
| maltego.anomali.to_ttps_5 | maltego.anomali.STIX2Report |
| maltego.anomali.to_ttps_6 | maltego.anomali.STIX2Tool |
| maltego.anomali.to_ttps_7 | maltego.anomali.STIX2AttackPattern |
To CVEs
Description
Returns the associated CVEs for the input entity.
| maltego.anomali.global.global#anomali_api_key | API Key | string | | True | True | False |
| maltego.anomali.global.global#anomali_username | Username | string | | True | True | False |
| maltego.anomali.to_cves.only_internal | Search within my organization only | boolean | None | True | True | False |
| Display Name | To CVEs |
| Owner | Maltego Technologies GmbH |
| Author | Maltego Technologies GmbH |
| Data Source | |
| Short Description | Returns the associated CVEs for the input entity. |
| Output Entities | maltego.CVE |
Variants
| maltego.anomali.to_cves_0 | maltego.anomali.STIX2ThreatActor |
| maltego.anomali.to_cves_1 | maltego.anomali.STIX2Campaign |
| maltego.anomali.to_cves_2 | maltego.anomali.Signature |
| maltego.anomali.to_cves_3 | maltego.anomali.TTP |
| maltego.anomali.to_cves_4 | maltego.anomali.STIX2Malware |
| maltego.anomali.to_cves_5 | maltego.anomali.STIX2Report |
| maltego.anomali.to_cves_6 | maltego.anomali.STIX2Tool |
| maltego.anomali.to_cves_7 | maltego.anomali.STIX2AttackPattern |