With the availability of OpenCorporates’ extensive database of global company information, investigators can leverage Maltego to explore beneficial ownership, money laundering, and financial crimes, and conduct comprehensive corporate investigations to support their due diligence and trust and safety efforts.
OpenCorporates Transforms are accessible to all investigators on Maltego Professional or Maltego Organization plans.
Follow along to learn how to get started or watch our deep dive where we used OpenCorporates and OSINT to identify potential human trafficking organizations!
Table of Contents 🔗︎
Getting Started with OpenCorporates Transforms in Maltego 🔗︎
Typically, an investigation into a company starts with a name. Drag the Company Entity onto your graph from the Entity Palette and double-click its value to enter the name of the company you want to investigate. Alternatively, you could also use any Company or Organization Entity that is already on one of your graphs, for example, one resulting from a WHOIS query or network footprint.
Searching for Companies in OpenCorporates 🔗︎
To look up the company in OpenCorporates, run the Search Companies [OpenCorporates] Transform.
![Search Companies [OpenCorporates] Transform](/images/uploads/opencorporates003.png)
You may specify additional search filters using the Transform Settings popup, but, except for the API key field, all of these are optional and can simply be left blank. For details on what these filters mean and how to use them, please see the OpenCorporates API documentation.
After running this Transform, you will usually receive several OpenCorporates Company Entities returned to the graph which match your query. If many companies matched your query, these may be returned as a collection node, such as in the example below. In this case, a relevant candidate was selected from the results and pinned in order to remove it from the collection node.
Digging Deeper: Address Information and Reverse Address Search 🔗︎
To fetch the address of the company and return it as a Location Entity, run the To Address [OpenCorporates] Transform.
![To Address [OpenCorporates] Transform](/images/uploads/opencorporates006.png)
You may notice that after running this Transform on the OpenCorporates Company Entity, a blue dot is added to it. This is used to indicate that another API call to OpenCorporates was made to fetch all available details about the company, and that these full details are now populated on the Entities’ properties. This happens automatically, and generally only once per Entity: Once the properties are populated, the Transform server will not duplicate this API request for that particular Entity next time, in order to use less of your OpenCorporates API request quota. However, note that the server does not cache this information – if you run the same sequence of Transforms on a new graph, the same number of API calls may be made.
The resulting Location Entity will often only display a city and/or country in its value. By inspecting the properties, it is possible to see that in this case, a street level address was in fact returned (in which the city was not fully parsed by OpenCorporates).
Given this street-level address, it is possible to now run a reverse address search to see what other companies are registered at the same location. For this, use the Search Companies at this Address [OpenCorporates] Transform on the Location Entity.
![Search Companies at this Address [OpenCorporates] Transform](/images/uploads/opencorporates008.png)
In the example case, quite a few more Wirecard legal entities are found to be registered at the same address, which is expected given that the starting point of this investigation was Wirecard’s main “headquarters” legal entity.
Finding and Mapping Officers of Companies 🔗︎
Some of the returned results do not share any obvious affiliation with Wirecard based on their name alone. To pick an example, one of these companies is “PAYShield Services GmbH”. It’s possible to investigate further connections between this company and “Wirecard AG” by inspecting the registered officers of each respective company. Switching back to block layout, running the To Officers [OpenCorporates] Transform on both companies yields the following result:
![To Officers [OpenCorporates] Transform](/images/uploads/opencorporates009.png)
There are a few duplicated names here, however none of the Entities were automatically merged. With respect to Maltego, this is unfortunately a built-in limitation of the way data is represented in OpenCorporates. Each officer of a company has a different OpenCorporates ID, and no disambiguation is made to determine whether an officer is the same person as an officer in another company, so they are assumed to be different people in every case, to be safe.
While this is a slightly inconvenient limitation, it is relatively easily to get around by manually merging OpenCorporates Officer Entities who can, with reasonably certainty, be assumed to be the same person. This results in the following graph:
Finding Other (Possibly) Connected Companies to an Officer 🔗︎
Finally, we want to present a practical workflow that results from the limitation described above. Since officers are not merged in OpenCorporates, a bit of extra work is required to more fully map the network of companies a given person may be involved in. The basic sequence of steps to follow is:
- Start with the Person or OpenCorporates Officer of interest
- Run the Search Officers [OpenCorporates] Transform
- For all relevant results, run the To Company [OpenCorporates] Transform
- Merge the previously returned OpenCorporates Officer Entities to clean up the graph again
Continuing the above example, this process looks as follows. First, a search for officers is run:
![Search Officers [OpenCorporates]](/images/uploads/opencorporates011.png)
Next, each result is pivoted to the associated company:
![To Company [OpenCorporates] Transform](/images/uploads/opencorporates012.png)
Finally, after the companies are returned, the duplicate officers are merged:
This results in the structure we set out to visualize.
Real-Life Investigation with OpenCorporates and Maltego 🔗︎
For more insights and step-by-step guidance, you can watch our deep dive session where Maltego intelligence expert, Daphnée Aguilar, and Rebecca Lee, Chief Impact Officer at OpenCorporates demonstrate a detailed investigation using OSINT, infrastructure data, personal identifier data, and OpenCorporates’ global legal entity database. Fill out the form below to watch the full recording!
Download the resource
Don’t forget to follow us on Twitter and LinkedIn or subscribe to our email newsletter to stay tuned for more product and Transform updates.
