{"id":20317927,"url":"https://github.com/crowdsecurity/maltego-transforms","last_synced_at":"2026-05-11T17:32:33.370Z","repository":{"id":103353670,"uuid":"586921392","full_name":"crowdsecurity/maltego-transforms","owner":"crowdsecurity","description":"CrowdSec's CTI API integration as Maltego transforms","archived":false,"fork":false,"pushed_at":"2023-02-20T05:10:11.000Z","size":59,"stargazers_count":2,"open_issues_count":0,"forks_count":1,"subscribers_count":8,"default_branch":"master","last_synced_at":"2026-04-27T04:34:03.120Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/crowdsecurity.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2023-01-09T14:46:57.000Z","updated_at":"2026-04-14T02:16:11.000Z","dependencies_parsed_at":"2023-07-07T21:01:54.995Z","dependency_job_id":null,"html_url":"https://github.com/crowdsecurity/maltego-transforms","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/crowdsecurity/maltego-transforms","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/crowdsecurity%2Fmaltego-transforms","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/crowdsecurity%2Fmaltego-transforms/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/crowdsecurity%2Fmaltego-transforms/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/crowdsecurity%2Fmaltego-transforms/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/crowdsecurity","download_url":"https://codeload.github.com/crowdsecurity/maltego-transforms/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/crowdsecurity%2Fmaltego-transforms/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":32905880,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-11T17:09:15.040Z","status":"ssl_error","status_checked_at":"2026-05-11T17:08:45.420Z","response_time":120,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-14T18:37:20.308Z","updated_at":"2026-05-11T17:32:33.353Z","avatar_url":"https://github.com/crowdsecurity.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"Maltego transforms, which allow users to enrich IP entities in maltego with CrowdSec CTI intelligence.\n\n# Deployment Guide\n\n## Prerequisites\n\nMake sure your instance has docker and docker compose installed. The instance should have a public IP.\n\n## Steps\n\n### Starting the transform server\n\nClone the repo and cd into it and start docker compose:\n\n```\ngit clone https://github.com/crowdsecurity/maltego-transforms\ncd maltego-transforms\ndocker compose up\n```\n\n### Modify settings to point to your IP\n\nWith your current working directory being in the cloned repo. Run the following command to point the settings to your instance\n's IP\n\n```\nsed -i \"s/my_ip/1.2.3.4/g\" transforms.csv\n```\n\nReplace **1.2.3.4** with your instance's IP\n\n\n### Registering at pTDS\n\n#### Importing Transforms\n\n1. Navigate your browser to [pTDS website](https://public-tds.paterva.com/ptds/login)\n\n2. Create an account and login.\n\n3. Navigate to [Transforms](https://public-tds.paterva.com/transforms)\n\n4. Click on import Transforms.\n\n5. Click on Choose File and navigate to `transforms.csv` file we modified earlier.\n\n6. Finally click on **Import Transform** Button\n\n#### Creating a Seed\n\n1. Navigate to [Seeds](https://public-tds.paterva.com/seeds)\n\n2. Click on **Add Seed** Button.\n\n3. Fill in the Seed Name, with name of your choice.\n\n4. Click on the Transforms dropdown  and select all the CrowdSec Transforms.\n\n5. Click on the **Add Seed** Button.\n\n\nDone ! You can now share the Seed URL to maltego clients, and they'd be able to use the transforms. \n\n\n# User Guide\n\n## Installation\n\n### Registering the Seed URL\n\nIn your maltego client register the Seed URL we created in the above deployment guide  by following [this guide](https://docs.maltego.com/support/solutions/articles/15000011965-how-do-i-add-a-new-transform-seed-to-my-maltego-client-)\n\n### Adding CrowdSec API key to the transforms\n\n1. Obtain the CrowdSec CTI API key by following this guide\n\n2. Follow [this guide](https://docs.maltego.com/support/solutions/articles/15000017851-setting-api-keys-for-all-transforms-inside-a-hub-item) except select CrowdSec Transform Server.\n\n3. Copy paste the API key in the `API key` field in the tranform properties\n\nDone !\n\n## Usage\n\nAll the CrowdSec transforms take the builtin IP entity as an input. You'd have an option to run them whenever you right click an IP entity.\n\nAs per your requirements you can either run multiple transforms or just a single one.\n\nBelow is a reference to what each transform does.\n\n\n# Transform reference\n\n#### CrowdSecAS\n\nAdds AS entity for an IP by leveraging CrowdSec CTI data\n\n#### CrowdSecActivity\n\nAdds activity details properties to an IP using CrowdSec data.\n\n#### CrowdSecAddAPIResp\n\nAttaches CrowdSec CTI API response as a property to IP entity.\n\n#### CrowdSecBehaviours\n\nCreates a behaviour entity for an IP by leveraging CrowdSec CTI data\n\n#### CrowdSecClassification\n\nCreates classification details entities for an IP using CrowdSec data.\n\n#### CrowdSecIPRange\n\nCreates an IP range entity for an IP by leveraging CrowdSec CTI data.\n\n#### CrowdSecLocation\n\nAdds location entities by leveraging CrowdSec CTI data.\n\n#### CrowdSecReverseDNS\n\nCreates Reverse DNS entity for an IP by leveraging CrowdSec CTI data\n\n#### CrowdSecScenarios\n\nCreates entites for scenarios triggered by IP using CrowdSec CTI data.\n\n#### CrowdSecScores\n\nAdds score details for an IP by using CrowdSec CTI.\n\n#### CrowdSecTargetCountries\n\nLinks IP entity with countries most attacked by it, using CrowdSec data.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcrowdsecurity%2Fmaltego-transforms","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcrowdsecurity%2Fmaltego-transforms","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcrowdsecurity%2Fmaltego-transforms/lists"}