https://github.com/ytisf/maltego-otx-pulses
A set of transformations to for indicators-pulses
https://github.com/ytisf/maltego-otx-pulses
alienvault alienvault-otx maltego maltego-transformations threat-analysis threat-intelligence threatintel
Last synced: about 1 year ago
JSON representation
A set of transformations to for indicators-pulses
- Host: GitHub
- URL: https://github.com/ytisf/maltego-otx-pulses
- Owner: ytisf
- License: gpl-3.0
- Created: 2019-11-28T06:21:03.000Z (over 6 years ago)
- Default Branch: master
- Last Pushed: 2019-11-28T06:23:16.000Z (over 6 years ago)
- Last Synced: 2025-02-05T22:42:54.761Z (over 1 year ago)
- Topics: alienvault, alienvault-otx, maltego, maltego-transformations, threat-analysis, threat-intelligence, threatintel
- Language: Python
- Size: 22.5 KB
- Stars: 1
- Watchers: 2
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# OTX AlienVault Pulses Maltego Transforms
## What is This
These are 3 transforms (transform-set) to do the following lookups:
- Domain to related pulses (including malware and adversaries).
- IPv4 to related pulses (including malware and adversaries).
- Hash to related pulses (including malware and adversaries).
**Important Notice** - Domain lookup will lookup either a subdomain (www.github.com) as `hostname` OR a domain name (github.com) and will lookup a `domain` according to AlientVault. This means that if you look for a Domain Entity of the content 'www.github.com' and it appears in a pulse as a hostname, it will appear. If it, however, appears as the domain 'github.com' then the search you've ran will not find that.
## How to Install
1. Copy all of the files to a folder `X`.
2. Run `pip install --user -r requirements.txt`.
2. Import the `maltego-OTX.mtz` file directly to Maltego.
3. Go to Maltego into the tab `Transforms` and hit `Transform Manager`.
4. Find the transforms by typing `otx` on the search bar on the top right.
5. Edit the `Command line` to point to your Python interpreter. You can find this using `which python` or `which python3`.
6. Edit the `Working Directory` to point to where you've copied the files (`X`).
## Appendix
Thanks to @paterva for `maltego-trx`.