Maltego Polyswarm Transform

Prerequisites:

• Maltego CE (Community Edition) or Maltego XL (Commercial Edition)
• Polyswarm API Key (You can obtain this from Polyswarm’s website)

Step 1: Register for a Polyswarm API Key

1. Visit Polyswarm’s website: Polyswarm
2. Sign up for an account if you don’t have one.
3. Once logged in, look for a section related to API access or developer tools where you can register for an API key. Follow the instructions to obtain your API key.

Step 2: Install Maltego

If you don’t have Maltego installed, download and install it from the official website: Maltego Official Website

Step 3: Access the Transform Hub

1. Open Maltego.
2. Go to the “Transform Hub” tab on the main dashboard.

Step 4: Search for Polyswarm Transforms

1. In the Transform Hub, use the search function to look for Polyswarm transforms.
2. If Polyswarm has developed Maltego transforms, you may find them here.

Step 5: Install Polyswarm Transforms

1. Click on the Polyswarm transforms if you find them in the Transform Hub.
2. Select “Install” or “Add to Maltego” to add them to your Maltego installation.

Step 6: Configure Polyswarm Transform

1. In Maltego, click on the “Transforms” tab.
2. Select “Manage Transforms.”
3. Locate the Polyswarm transforms you’ve installed.
4. Enter your Polyswarm API Key in the configuration settings.

Step 7: Use Polyswarm Transforms

1. Close the “Manage Transforms” window.
2. Create a new Maltego graph.
3. In the “Transforms” palette on the left, you should now see Polyswarm transforms.
4. Drag and drop the Polyswarm transforms into your graph.
5. Configure the transforms with the necessary parameters (e.g., suspicious files, URLs, etc.).
6. Run the transforms to gather information related to security and threat intelligence using Polyswarm’s platform.