CyberCode Academy

Course 12 - Maltego Advanced Course | Episode 1: Maltiggo Transforms, Sets, and Essential Menu Actions

Listen Later
In this lesson, you’ll learn about:
  • How transforms work in Maltego
  • Transform sets and how they organize large transform collections
  • Key transform menu actions and shortcuts
  • Essential bottom-row menu actions for efficient workflow
Summary of the Episode: This episode explains the core mechanics of Maltego transforms, how to run them, how they are organized, and the essential menu actions available when working on a graph. 1. Understanding Transforms
  • Transforms are functions that take one or more selected entities as input.
  • They only appear if relevant entity types are selected.
  • Transforms can be run in two ways:
    • Through the right-click transform menu on the graph
    • Through the Run View
2. Transform Sets Because some entities (like Domain) have very long lists of transforms, Maltego organizes them into transform sets.
  • Transform sets help users find transforms more easily.
  • Sets and transforms are grouped first by their hub item, which may introduce new transforms (e.g., Thread Miner included by default).
  • Navigation:
    • Click a group or set to see its contents
    • Use the left bar or right-click → Up to go back a level
3. Recognizing Items in the Transform List
  • Transforms
    • Dark background (near-black)
    • Single play icon ▶
  • Groups/Sets
    • Light background
    • Small plus icon ➕
  • Run All in a Set
    • Double-play icon ▶▶
    • Use with caution due to potentially large output
4. Special Transform Sets
  • All
    • Appears on every level
    • Shows all transforms for the selected entity/entities
  • Favorites
    • Only appears if you starred transforms for the current entity type
  • Machines
    • Appears at the topmost level, at the bottom
    • Shortcut to run Maltego Machines
5. Customizing Your Transform Experience
  • Users can create custom transform sets in the Transform Manager.
  • Hub items can add new transform groups to your environment.
6. Essential Right-Click Menu Actions (Bottom Row) These are shortcuts to functions available elsewhere in Maltego: Basic Actions
  • Delete / Cut / Copy
    • Copy sends entity as GraphML to clipboard
    • Can be pasted into another graph
Type Actions
  • Quickly search the entity value in Google or Wikipedia
  • Used rarely
Send to URL
  • Sends selected entities to a custom HTTP POST endpoint
Clear / Refresh Images
  • Reloads images from original sources
  • Works only in normal privacy mode, not stealth mode
Copy to New Graph
  • Creates a brand-new graph containing the selected entities and their links
  • Useful for:
    • Experimentation
    • Isolating parts of a graph
  • You can later copy results back into the original graph
Change Type
  • Converts entity from one type to another (e.g., DNS name → Website)
  • Crucial when the target transform isn’t available for the current type
Merge
  • Combines two entities that represent the same real-world object
  • Consolidates their links
Attach
  • Adds files (evidence, screenshots, etc.) to an entity
  • Attached images can be displayed on the graph instead of the entity icon
7. Most Important Actions to Remember
  • Copy to New Graph
  • Change Type
  • Merge
  • Attach
These actions significantly improve workflow efficiency and flexibility when working with complex investigations.

You can listen and download our episodes for free on more than 10 different platforms:
https://linktr.ee/cybercode_academy
...more
View all episodesView all episodes
Download on the App Store
CyberCode AcademyBy CyberCode Academy