Maltego is a data mining and information gathering tool that helps determine real world links between people, social networks, companies, websites, internet infrastructure, phrases, and documents. It works using "transforms" to identify key relationships and unknown relationships between information. Maltego logs limited usage data while respecting user privacy, and can be used for security assessments, investigations, and learning more about companies and individuals by accessing public information from beyond just Google in an easier manner than traditional search methods.

1. Information Gathering with Maltego Tom Eston Information Security Forum October 2008

2. What is Maltego? Data mining and information gathering tool Identify key relationships between information and find unknown relationships Uses “transforms”

3. What does Maltego do? Helps determine real world links between… People Social Networks Companies/Organizations Web sites Internet Infrastructure (DNS, Domains, Netblocks) Phrases Documents and files

4. How does it work?

5. Maltego Transforms

6. What is logged? API key IP Address (yours) The transform executed The time it executed Your user ID (which gives first name, last name and email address) The questions asked or the results are NOT logged Except for a few transforms that use web services…

7. What can it do for you? Information gathering phase of all security related work Assessments Investigations Public information about a company or person Saves time Easier to use then Google “hacking” Hits more then just Google!

8. Where to get it? Community edition Download via paterva.com also found on Backtrack 3 No saving, limited to 75 transforms, etc… Full version has no limitations $430 per year Runs on Linux, OS X, Windows http://www.paterva.com/maltego/

9. More Information Room362.com Maltego 2 and beyond http://www.room362.com/archives/225-Maltego-2-and-beyond-Part-1.html EthicalHacker.net Chris Gates Maltego Series http://www.ethicalhacker.net/content/view/202/1/

10. Demo…