Maltego Mandiant Transform

Setting up Mandiant Threat Intelligence Maltego Transform

Prerequisites:

1. Maltego XL or Maltego Community Version: You can use either Maltego XL (Commercial Edition) or Maltego Community Version for this setup. Maltego Community Version is free and can be downloaded from the official website: Maltego Official Website.
2. Access to Mandiant Threat Intelligence Transforms: You will need access to Mandiant Threat Intelligence Maltego Transforms, which may require registration or an API key. You can obtain these from the Mandiant Threat Intelligence official website and API registration page.

• Mandiant Threat Intelligence Official Website
• Mandiant Threat Intelligence API Registration

Step 1: Obtain Information from Mandiant Threat Intelligence

• Visit the official website or API registration page of Mandiant Threat Intelligence using the links provided above.
• Look for documentation or resources related to the Mandiant Threat Intelligence Maltego Transform, including installation instructions and API access. This documentation will guide you through the setup process.

Step 2: Install Maltego

If you haven’t already installed Maltego XL (Commercial Edition) or Maltego Community Version, please download and install the appropriate version from the official website mentioned in the prerequisites.

Step 3: Access the Transform Hub (if applicable)

• Open Maltego.
• Go to the “Transform Hub” tab on the main dashboard. This is where you can access and install external transforms.

Step 4: Search for Mandiant Threat Intelligence Transforms (if available)

• In the Transform Hub, use the search function to look for Mandiant Threat Intelligence transforms.
• If Mandiant Threat Intelligence has developed Maltego transforms and made them available on the Transform Hub, you may find them here.

Step 5: Install Mandiant Threat Intelligence Transforms (if available)

• Click on the Mandiant Threat Intelligence transforms if you find them in the Transform Hub.
• Select “Install” or “Add to Maltego” to add them to your Maltego installation.

Step 6: Configure Mandiant Threat Intelligence Transform

• In Maltego, click on the “Transforms” tab.
• Select “Manage Transforms.”
• Locate the Mandiant Threat Intelligence transforms you’ve installed.
• Enter any required configuration settings, such as API credentials, in the transform’s configuration. Refer to the documentation obtained in Step 1 for guidance on configuring the transforms.

Step 7: Use Mandiant Threat Intelligence Transforms

• Close the “Manage Transforms” window.
• Create a new Maltego graph.
• In the “Transforms” palette on the left, you should now see Mandiant Threat Intelligence transforms (if installed).
• Drag and drop the Mandiant Threat Intelligence transforms into your graph.
• Configure the transforms with the necessary parameters for your specific use case.
• Run the transforms to integrate threat intelligence data into your investigations using Mandiant Threat Intelligence’s capabilities.

Please keep in mind that the availability and setup process for Maltego transforms can vary, so referring to Mandiant Threat Intelligence’s official documentation and resources is crucial for a successful setup and use of their transforms.