Meltego user guide
Contents
1. google cam alt2 aspmx google com aspmx qoogle cam WW patera c ormi r E as sep y ze P4125 47 24 74 125 113 27 74 125 65 27 74 207 243 85 GI Ba Se Al Fim ka Se Em v4 125 47 0 74 125 47 255 74 125 113 0 74 125 113 255 F4 125 65 0 74 125 65 255 74207 2439 0 74 207 243 255 e 15169 When these nodes are selected and the Add path button is clicked the following nodes will be selected those along the path Addendum to Maltego User Guide for v3 0 2 Page 16 altl aspmx google cam alt aspmx google cam aspmx gaogle com F4 125 47 27 74 125 113 27 74 125 65 27 ae eg Se ee 74 125 47 0 74 125 47 255 F4 125 113 0 74 125 113 255 7F4 125 65 0 74 125 65 255 74207 243 0 74 207 243 25 This is very useful when combined with the Link Entity selection mode If the above graph is switched to Link selection mode the links between the highlighted entities are selected Addendum to Maltego User Guide for v3 0 2 Page 17 D paterva com SC alt aspmx google cam EE aspmx qoogle cam WAN paterna am E E we wer 74 125 A4 27 74 125 113 27 74 125 65 27 T4207 243 85 Ei ill id e Fim Em Sie Se T4125 47 0 74 125 47 255 F4 125 113 0 74 125 113 255 F4 125 65 0 74 125 65 255 74 207 243 0 74 207 243 255 vi 15169 Basa They can now be edited Let s assume we want to mark the path between the entities with a thick dotted red line Addendum2. 1234 1 888 543 1234 domain com site domain com Bera URL Title roelof paterva cam Note that the URL entity type displays the title of the URL when pasted from text this is not displayed but the entity will work as expected You can also paste back from Maltego to text Consider the following Addendum to Maltego User Guide for v3 0 2 Page 5 paterva com After the nodes has been selected and copied Control C or via the GUI buttons pasting into a text editor renders the following E Untitled Notepad www paterva com alpine paterva com ec2 paterva com gogo paterva com cetas paterva com ctas paterva com play paterva com tastools paterva com goog le3c0aa04e7 flaf19b paterva com maltego4 paterva com Keep in mind that Maltego will fail at recognition of complex entities in some cases think phone numbers In these cases my might want to tell Maltego what the entity type is This can be done by appending the entity value with the entity type Consider the following text Addendum to Maltego User Guide for v3 0 2 Page 6 E Untitled Notepad ma ltego Phrase goog le com ma ltego Phrase paterva com ma ltego Phrasefww paterva com When this is selected and pasted it results in the following graph J U google com paterva com www paterva cam Entity names e g what s inserted before the can be obtained by dragging an entity to the graph and looking in the det
3. Paterva User guide Addendum to guide for Maltego 3 0 2 RT DD DD DD Dom DD DDD mm Dm DD o DD o o om DD DD o o a f Ly Dm Dm LD e SE DD a o o o Dm VV o E ess Contents Nolid go 6 Te ON Reeeemment ere a Rea rer eae E SR ens enter ene nen oer eee eee e eee RR 3 Sao Ae e EE 3 Between graD NS SR ER EPA 3 FOE Me soc ete te E EA E ADS MR ERRO DN RD IN E 5 Link selection properties and link Jobele nu H LINK VS e MOOC EE T Link mode E eg in E a EE 8 SENE UP MNIKO 11 SO CUS MECHER 11 Bi e SS EE 13 INC WGC ISCO do q 0 ICS JOSE REA A RP EE CRE E UR 15 POG OAV Es PER RSRS NES RS NO E JRR ANE NR RS RO RS 15 Addendum to Maltego User Guide for v3 0 2 Page 2 Introduction Version 3 0 2 of Maltego addresses two particular issues copy and paste and link properties This brief document attempts to explain how to use these new features We are about as keen on writing this document as you are reading it so we ve tried to keep out the waffle and show concise to the point examples Copy and paste Between graphs Copy and paste was a bit of an ordeal prior to version 3 0 2 all of this has been fixed In version 3 0 2 when you right click on selected entities a context menu is displayed Bod to palette Copy to new graph Copy with links You can decide if you want the sub graph or just the entities that are selected Copy with links vs Copy without links Another
4. The link parameters such as color style and thickness is preserved in the new graph Addendum to Maltego User Guide for v3 0 2 Page 20
5. ail view at the entity type description highlighted in red below Detail View Phrase maltego Phr ome phrase Link selection properties and link labels One of the main improvements of 3 0 2 is dealing with links Link vs entity mode Maltego 3 0 2 can operate in two different modes link selection mode or entity selection mode The default mode is entity selection mode To switch between modes you can press control M or click on the mode selection icon at the top this icon indicates the current mode Addendum to Maltego User Guide for v3 0 2 Page Entity Link Selection Selection To quickly switch you can also press and hold the Control key while dragging or selecting Link mode selecting links In link selection mode you will be selecting links Dragging a box around links will select multiple links oo Ge 8 Select None de Select parents Ze Add parents oo A Add similar siblings Select children Add children Select Invert All Selection Add path de Select neighbours Sx Add neighbours EE Co Q X Zoomto gt Zoom to Fit Zoom Zoom in out TN Zoom 100 piri pot SIS ETTA paterva com f f Bi Bi Bi altl aspmx google com alt2 aspmx google com aspmx google com Se Se ETR a 8 a 8 74 125 65 0 74 125 65 255 74 125 45 0 74 125 45 255 74 125 155 0 74 125 155 255 15169 Will result in the following selectio
6. ck By default transform link labels are set to be invisible in global settings highlighted section Investigate Manage if Import entities a Show all link labels ei Ces RW Na E Export entities e Manual labels New Entity Manage Discover Manage Mew Type Entities Transforms Transforms Transform Transform labels TPs Dt Individual link labels can be set to be visible or not independent of the global settings This is done by selecting the link and double clicking on it Single link or in the property view multiple links Addendum to Maltego User Guide for v3 0 2 Page 14 d Properties x Casts OO Use Global Setting E Use Global Setting Yes Alo You can override the global setting per link by setting the Show label to Yes or No This applies to transform generated link labels as well as manual links New selection shortcuts Two new selection shortcuts have been introduced Ea Select None da Select parents E dd parents A Add similar siblings A Select children A Add children si Add path ni Select neighbours do 4dd neighbours Add path The add path selection shortcut is most useful It selects the nodes in the path between multiple nodes and there is disabled unless multiple nodes are selected This is best shown with an example Let s assume the following nodes are selected Addendum to Maltego User Guide for v3 0 2 Page 15 alt aspmx
7. dendum to Maltego User Guide for v3 0 2 Page 10 Poa alt aspmx google com eita La paterva com L alt aspmx l google com 1 aspmx google com se ss TA 12565 27 T4 125 4527 14126166 27 Be CH CH Sie Eg tm ke E Be Ke Se f4 125 65 0 74 125 65 255 4 125 45 0 74 125 465 7255 74 125 155 0 74 125 155 255 15169 The select parent select child etc functions also works for link selection Setting up manual links Manual links can be established in two ways e Left click and hold on an unselected source entity then drag link to target entity as per 3 0 1 e In link selection mode simply connect the two entities Setting link properties Link properties can be set in three ways 1 When a manual link is created the link property dialog pops up per default 2 By double clicking on a single link when in Link selection mode or holding down Control key 3 By setting the fields in the property view multiple links The link property dialog is displayed in option 1 and 2 and looks as follows Addendum to Maltego User Guide for v3 0 2 Page 11 Properties Use Global Setting Sample Text Sample Text From here the user can select the label the text that will be rendered on the link set the color Style thickness etc To set the properties of multiple links do the following e Select the links using any of the methods described e Setthe properties of
8. n Addendum to Maltego User Guide for v3 0 2 Page 8 F Results co Ge ee Select Mone de Select parents fa Add parents o amp Add similar siblings A Select children A Add children Link Select Invert Selection All Selection e Add path NW Select neighbours pu Add neighbours CL CL Zoom bo i Zoom bo Fit Zoom Zoom in out TN Zoom 100 paterva com 7 t t at aspmx l google com alt2 aspmx google com aspmx google com ep ep es TA 25 B5 27 74125 45 27 74 125 155 27 E CH Ti CH Se Se Em 74 125 65 0 74 125 65 255 74 125 45 0 74 125 45 255 74 125 155 0 74 125 155 255 o 15169 Note that link selection mode is enabled Links can also be selected by selecting nodes in entity selection mode and then switching to link selection mode This is super useful to select for instance all incoming links to an entity Let s assume that we want to select all links coming into the AS 15169 in the graph above We select the AS node and then press Control Up Arrow or click on the Add parents button to add the parents of this node The graph ends up to looks like this Addendum to Maltego User Guide for v3 0 2 Page 9 Bam J a FT paterva com Ge ae e altl aspmx google com alt2 aspmx google com aspmx google com fA 125 6527 78126 46 27 fd 126 156 27 Switching to Link Selection mode from here the incoming links are selected Ad
9. new feature is Copy with neighbours This allows you to easily focus on the part of the graph that is interesting by isolating nodes around the node of interest There are three sub categories Addendum to Maltego User Guide for v3 0 2 Page 3 he aspmx google com Ad bo palette Copy to new graph Copy with neighbours amp Children f4 125 155 0 74 125 155 255 Any will select copy and paste child and parent nodes to a new graph Children will only select child nodes and Parents will only select parent nodes The numeric field indicated how many level should be selected Let s assume we want all the parents and children of the IP number selected in the example above We ll use Any and the number 1 This will result in a new graph that looks as follows ae aspmx l google com ES AR DE T4 125 155 0 74 125 155 255 Addendum to Maltego User Guide for v3 0 2 Page 4 From text As in version 2 Maltego version 3 0 2 tries to identify the type of entity that is pasted from text Consider the following example E Untitled Notepad oelof Temmingh his is a phrase 10 0 0 1 1 888 543 1234 domain com site domain com http www paterva com web5 roe lof paterva com Copying and pasting all of the above text into Maltego leads to i F we ez Roelof Temmingh this is a phrase 10 0 0 1 192 168 0 1 192 1656 0 15 A ip 27 12 667
10. the links in the property view highlighted in the screenshot below Addendum to Maltego User Guide for v3 0 2 Page 12 Property View Properties M Show Label Use Global Setting E Color O es Style Solid T4 125 92 0 74 125 93 255 T4 125 66 0 74 125 67 255 74125 94 0 74 125 95 255 Thickness 1 i 0 To 45 number 1 0 0 Different values Different values 15169 15169 E jo EE EE Dashed Dotted Dashed dotted A link label is the text that is displayed on the link Link labels Addendum to Maltego User Guide for v3 0 2 Page 13 Cos said so paterva com d www paterva com There are two types of labels e Those generated by transforms e Those set up by the user Labels generated by transforms cannot be edited by the user Manual links can be edited by double clicking on the link holding down Control or when Link selection mode and multiple links can be edited all at once by selecting them and editing in the Property view want it so want it so Label A AN Cos said so et paterva com Be it so Pretoria South Africa Properties abel E Show Label Use Global Setting Color E 150 200 150 J Style Solid 21 12 667 0000 Thickness 1 want it so d Link labels both types can be set to be visible or invisible When working with a large graph you might not want to show all the transform link labels as things get confusing real qui
11. to Maltego User Guide for v3 0 2 Page 18 paterva com o ati asprmx l google com aht2 aspme l google com asprmx l google com vam paterva com E wer er T4125 47 27 74 125 113 27 74 125 65 27 lt zl E LA CH E o MH e o kl kd KA Jis Fim Sa Sa a 74 125 47 0 74 125 4 205 74 125 113 0 74 125 113 255 74 125 65 0 74 125 65 255 74 207 243 0 74 207 243 255 15168 DD 20 The Property View for these settings ends up looking like this Property view Properties Show Label Use Global Setting Color red Style Dotted Thickness Weight T Transtorm name Different values gt Transform version 1 0 0 Date run lt Different values gt SOU Ce Ditterent v alues el We can also easily copy the selected path into a new graph Switch back to entity selection mode and right click on any node select Copy to new graph gt Copy with links Addendum to Maltego User Guide for v3 0 2 Page 19 KN am Ro alt aspmx google cam alt aspmx google cam asprme lgoogle com ss e es F4 125 47 27 74 125 113 27 74 125 65 27 Saato palette Copy to new graph Copy with links 74 125 47 0 74 125 47 255 74 125 113 0 74 125 113 255 F4125 65 0 74 125 65 255 74 207 243 0 74 15159 This results in a new graph with the path only paterva com E E WWW paterva com E E 4207 243 05 E Y Ze GO ZA 207 2430 74 207 243 255 6939
Download Pdf Manuals
Related Search