June 18, 2024

Maltego CaseFile Entities Transform

2 min read


  1. Maltego CE (Community Edition) or Maltego XL installed.
  2. Access to the CaseFile Entities transform from the Maltego Transform Hub.

Step 1: Download the CaseFile Entities Transform from the Transform Hub

To get started, you need to download the CaseFile Entities Maltego transform from the Transform Hub:

  1. Open Maltego.
  2. Go to the “Apps” tab on the left sidebar.
  3. In the “Transform Hub” section, search for “CaseFile Entities” or the specific transform package provided by CaseFile.
  4. Click on it, then click “Download” or “Install.”

Step 2: Set Up the CaseFile Entities Transform

After downloading the transform, you can set it up:

  1. Open Maltego.
  2. In the “Manage” tab, click on “Transforms Manager.”
  3. Find the CaseFile Entities transform you downloaded and click on “Settings” or “Configure.”

Step 3: Access CaseFile Resources

Here are the URLs to access CaseFile resources:

  • CaseFile Website: Visit the official CaseFile website to learn more about the software and its features.

Step 4: Use the CaseFile Entities Transform

Now that you’ve configured the transform, you can use it to interact with CaseFile entities and data:

  1. Open Maltego.
  2. Create a new graph or open an existing one.
  3. Right-click on an entity (e.g., a person’s name, an IP address, or a location) in your Maltego graph.
  4. In the context menu, select “Run Transform.”
  5. Choose the CaseFile Entities transform from the list.
  6. Click “Run.”

The transform will query CaseFile data sources for relevant information and present it in your Maltego graph, helping you visualize and analyze data related to your investigation.

Step 5: Save and Export

After performing your analysis and enriching your Maltego graph with CaseFile data, you can save your graph and export it in various formats for reporting and sharing.

Leave a Reply

Your email address will not be published. Required fields are marked *

Discover more from

Subscribe now to keep reading and get access to the full archive.

Continue reading