June 18, 2024

Maltego STIX 2 Utilities Transform

2 min read


  1. Maltego CE (Community Edition) or Maltego XL installed.
  2. Access to the STIX 2 Utilities transform from the Maltego Transform Hub.

Step 1: Download the STIX 2 Utilities Transform from the Transform Hub

To begin, you need to download the STIX 2 Utilities Maltego transform from the Transform Hub:

  1. Open Maltego.
  2. Go to the “Apps” tab on the left sidebar.
  3. In the “Transform Hub” section, search for “STIX 2 Utilities” or the specific transform package provided by STIX.
  4. Click on it, then click “Download” or “Install.”

Step 2: Set Up the STIX 2 Utilities Transform

After downloading the transform, you can set it up:

  1. Open Maltego.
  2. In the “Manage” tab, click on “Transforms Manager.”
  3. Find the STIX 2 Utilities transform you downloaded and click on “Settings” or “Configure.”

Step 3: Access STIX 2 Resources

Here are the URLs to access STIX 2 resources:

  • STIX 2 Website: Visit the official STIX 2 documentation to learn more about the STIX 2 standard and its data models.
  • Github Repo: Access the STIX 2 GitHub repository to explore the source code and community contributions.

Step 4: Use the STIX 2 Utilities Transform

Now that you’ve configured the transform, you can use it to interact with STIX 2 data:

  1. Open Maltego.
  2. Create a new graph or open an existing one.
  3. Right-click on an entity (e.g., a threat indicator or a threat actor) in your Maltego graph.
  4. In the context menu, select “Run Transform.”
  5. Choose the STIX 2 Utilities transform from the list.
  6. Click “Run.”

The transform will query STIX 2 data sources for relevant information and present it in your Maltego graph, helping you analyze and visualize threat intelligence data.

Step 5: Save and Export

After performing your analysis and enriching your Maltego graph with STIX 2 data, you can save your graph and export it in various formats for reporting and sharing.

Leave a Reply

Your email address will not be published. Required fields are marked *

Discover more from

Subscribe now to keep reading and get access to the full archive.

Continue reading