Maltego Hybrid Analysis Transform

Setting up Hybrid Analysis Transform in Maltego

In this tutorial, we will guide you through the process of setting up the Hybrid Analysis Transform in Maltego, allowing you to integrate threat intelligence and malware analysis data from Hybrid Analysis within your Maltego investigations. The Hybrid Analysis Transform is available for both the Maltego Community Version and Maltego XL (Commercial Edition).

Prerequisites:

1. Maltego Community Version or Maltego XL (Commercial Edition): You can use either the free Maltego Community Version or the licensed Maltego XL (Commercial Edition) for this setup. If you don’t have Maltego installed, you can download it from the official website: Maltego Official Website.
2. Access to Hybrid Analysis Transform: Ensure that you have access to the Hybrid Analysis Transform, which is typically available through a commercial license or subscription. You can obtain access to Hybrid Analysis’s services and the Transform from their official website.

• Hybrid Analysis Official Website

1. API Registration: You may need to register for an API key or obtain specific access credentials from Hybrid Analysis to use the Transform.

Step 1: Access Hybrid Analysis Transform

• Visit the official website of Hybrid Analysis using the link provided above.
• Sign up for a commercial license or subscription with Hybrid Analysis if you haven’t already. You will need access to Hybrid Analysis’s services to use the Transform.

Step 2: Obtain Hybrid Analysis Transform

The Hybrid Analysis Transform for Maltego is not available through the Transform Hub. You will need to obtain the Hybrid Analysis Transform package separately.

• Contact Hybrid Analysis’s sales or support team to inquire about obtaining the Hybrid Analysis Transform for Maltego.
• Follow their instructions for acquiring and installing the Transform.

Step 3: Install the Hybrid Analysis Transform

• Download the Hybrid Analysis Transform package to your local machine based on the instructions provided by Hybrid Analysis.
• Open Maltego.
• Go to the “Transforms” tab.
• Click on “Manage Transforms.”
• In the “Transform Manager” window, click on the “Import Configuration” button.
• Locate and select the Hybrid Analysis Transform package file you downloaded earlier.
• Click “Open” to import the configuration.

Step 4: Configure the Hybrid Analysis Transform

• In Maltego, under the “Transforms” tab, you should now see the Hybrid Analysis transforms that you imported.
• Click on the Hybrid Analysis transforms to configure them.
• Enter the necessary configuration settings, which will typically include your Hybrid Analysis API key and any other specific parameters required for your threat intelligence and malware analysis searches.

Step 5: Use the Hybrid Analysis Transform

• Close the “Manage Transforms” window.
• Create a new Maltego graph.
• In the “Transforms” palette on the left, you should now see the Hybrid Analysis transforms.
• Drag and drop the Hybrid Analysis transforms into your graph.
• Configure the transforms with the necessary parameters for your specific use case, such as file hashes, URLs, or threat indicators you want to investigate.
• Run the transforms to query Hybrid Analysis’s database and retrieve threat intelligence and malware analysis data using Hybrid Analysis’s capabilities.

Whether you’re using the free Maltego Community Version or the licensed Maltego XL, these transforms enhance your threat intelligence and malware analysis investigations.