The User Needs to Understand Maltego Transformations I plan to provide additional details about individual transformation providers again from the perspective of investigations. With this perspective in mind, below I evaluate the current transformations for Maltego Classic. Therefore, I will limit my consideration of transformations in this post to the investigative benefits rather than aspects of penetration testing. So gathering individual information from many sources makes sense, for example, data from SEO tools or information from threat intelligence databases. It is also often a matter of identifying the connections between websites, finding users/owners of domains and IP addresses, and other similar topics. For example, for email addresses and social network profiles, I need to identify the possible “real” person behind them. The focus of my investigations is “corporate investigations”. In this post, I will introduce the most important “OSINT” Maltego transformations. Last but not least, there is the possibility to write or install your own local transformations. From free-to-use transformations to expensive enterprise solutions, everything is available. The range of professional transformations in Maltego’s “Transform Hub” is therefore just as diverse. But which Maltego transforms do they use?Īlmost all users carry out “OSINT” investigations, but they have different perspectives and needs. For example, threat intelligence teams, analysts at the SOC, incident response teams, investigators, cyber investigators, prosecutors, and many others. It is a very versatile tool for a range of very different users.

In my experience, Maltego is an important and useful addition to other OSINT investigation tools and methods. How to optimize Maltego for OSINT Investigations with Maltego Transforms

Maltego trial license for 7