Kaspersky

Kaspersky Transforms for Maltego

Disclaimer: In light of the ongoing aggression against Ukraine, we are committed to ensuring transparency regarding the providers in the Transform Hub so that you can make the right decisions regarding your investigative work. Please note that Kaspersky is partially based in Russia. Learn more about Kaspersky’s position here (The Maltego Team, March 24, 2022)

Kaspersky Transforms allows investigators to check URLs, hashes of files, and IP addresses against the threat intelligence feeds from Kaspersky Lab. The Transforms can determine the category of an object as well as provide additional information (actionable context) that can be drawn from when implementing certain security policy.

Benefits

• The Transforms can be run on different Entities, including IP addresses, hashes, domains, and URLs. The Transforms provide information about Entities that are contained in threat data feeds
• Investigators can query into Kaspersky’s different threat data feeds on malware, phishing, botnet C&C. malicious hash, mobile malicious hash, P-SMS Trojan, IP reputation and mobile botnet

Typical Users of This Data

• Threat Intelligence Teams
• Security Analysts
• Incident Response Teams