Course 12 - Maltego Advanced Course | Episode 1: Maltiggo Transforms, Sets, and Essential Menu Actions

In this lesson, you’ll learn about:How transforms work in MaltegoTransform sets and how they organize large transform collectionsKey transform menu actions and shortcutsEssential bottom-row menu actions for efficient workflowSummary of the Episode: This episode explains the core mechanics of Maltego transforms, how to run them, how they are organized, and the essential menu actions available when working on a graph. 1. Understanding TransformsTransforms are functions that take one or more selected entities as input.They only appear if relevant entity types are selected.Transforms can be run in two ways:Through the right-click transform menu on the graphThrough the Run View2. Transform Sets Because some entities (like Domain) have very long lists of transforms, Maltego organizes them into transform sets.Transform sets help users find transforms more easily.Sets and transforms are grouped first by their hub item, which may introduce new transforms (e.g., Thread Miner included by default).Navigation:Click a group or set to see its contentsUse the left bar or right-click → Up to go back a level3. Recognizing Items in the Transform ListTransformsDark background (near-black)Single play icon ▶Groups/SetsLight backgroundSmall plus icon ➕Run All in a SetDouble-play icon ▶▶Use with caution due to potentially large output4. Special Transform SetsAllAppears on every levelShows all transforms for the selected entity/entitiesFavoritesOnly appears if you starred transforms for the current entity typeMachinesAppears at the topmost level, at the bottomShortcut to run Maltego Machines5. Customizing Your Transform ExperienceUsers can create custom transform sets in the Transform Manager.Hub items can add new transform groups to your environment.6. Essential Right-Click Menu Actions (Bottom Row) These are shortcuts to functions available elsewhere in Maltego: Basic ActionsDelete / Cut / CopyCopy sends entity as GraphML to clipboardCan be pasted into another graphType ActionsQuickly search the entity value in Google or WikipediaUsed rarelySend to URLSends selected entities to a custom HTTP POST endpointClear / Refresh ImagesReloads images from original sourcesWorks only in normal privacy mode, not stealth modeCopy to New GraphCreates a brand-new graph containing the selected entities and their linksUseful for:ExperimentationIsolating parts of a graphYou can later copy results back into the original graphChange TypeConverts entity from one type to another (e.g., DNS name → Website)Crucial when the target transform isn’t available for the current typeMergeCombines two entities that represent the same real-world objectConsolidates their linksAttachAdds files (evidence, screenshots, etc.) to an entityAttached images can be displayed on the graph instead of the entity icon7. Most Important Actions to RememberCopy to New GraphChange TypeMergeAttachThese actions significantly improve workflow efficiency and flexibility when working with complex investigations.You can listen and download our episodes for free on more than 10 different platforms:https://linktr.ee/cybercode_academy