Awesome.
I hope you enjoyed the demos.
But before we go, I want to show you some other features of Maltego.
As I mentioned in the previous videos,
the Maltego CE is a free version of the Maltego tool.
It is a really good starting point,
but it does have some limited numbers of transforms,
and also limited amount of results per transform.
Also, in theory, you cannot use Maltego CE for any commercial use,
so keep that in mind.
If you're planning to use the Montego in a daily basis for commercial purposes,
it is recommended that you use the Maltego Classic or XL versions.
And this version contains other OSINT transforms,
as well as access to commercial hub and some order more interesting transforms.
Or if you work in a company that is specializing in
investigations or if you work in a law enforcement agency,
then it is recommended that you have the Maltego Enterprise edition.
And this allows you to have an on‑premise deployment so
you can run your own transforms locally.
And this also allows you to integrate with your own data
and other systems that you might have.
This version has no limits or rates, so you can use it as much as you want.
In this course we cover only field transforms.
However, Montego has tons of other interesting ones.
For example,
there are a few transforms that will help in Blockchain investigations.
For example,
you can give a Bitcoin wallet address and find out which
other wallets had transactions with it.
That's pretty cool, right?
For example, if you paid money to criminals due to ransomware,
you can track where the money went.
Also,
there are a few hash investigation transforms in which you can give a
file hash and search for objects related to it.
For example, let's say you just receive a suspicious file.
You can get the MD5 hash and use Maltego to figure out if
this hash is on any antivirus blacklists.
And more than that, you can do threat intelligence searches.
For example,
you can give an IP address and use Maltego to find out if the
IP is related to any malicious activity.
And another interesting but creepy one is the phone number lookup
in which you can give a person name and Maltego will try to find
the phone number related to that person.
Again it's not 100% sure that it will find a number,
but it works in a lot of cases.
Also, there's some transforms that'll allow you to enrich personal data,
and what this means,
that you can give a person name and use the Maltego transforms
to find out their social media accounts,
email addresses, and even photos related to the name.
Also, you can use Maltego transforms to perform Shodan searches.
For example,
you can give an IP address and retrieve all the
information that Shodan can provide to you.
That's pretty cool, right?
I do recommend you checking the Maltego transform library.
There are more than 100 transforms in there.
Also, if you want to know more about Montego and its versions,
you can check its official documentation.
In there, they have a really good description of each Maltego version,
as well as the Maltego transforms.
Also just as a reminder, if you're using Maltego in a paid red team engagement,
you should get the paid version of Maltego.
The Maltego Community Edition is only for non‑commercial purposes.
Also, if you've got interest in the technical information gathering topic,
check out this order course here at Pluralsight called
Technical Information Gathering with theHarvester.
And this is a really good course on how to get more detailed
information about the people that work in a company.
And in case you're wondering how to prevent you and your company from
being target in such information‑gathering attacks,
there are few recommendations.
First, you can try to audit your own company,
meaning use Maltego against your own company and
see what it can find from there.
Also, a fun thing to do is using Maltego to find more information about yourself.
You might be surprised by the amount of information anyone can get about you.
Another recommendation is to ensure that personal
information is not available to the public.
For example, make sure your email address is not available in any website.
And if we're talking about a whole company it is important that all the
employees go through security awareness trainings.
So then they know what kind information they should be sharing or not.
So that's it.
That's the end our Maltego CE course.
I hope you enjoyed the demos,
and that now you have one or more tools in your cybersecurity toolbox.
So thank you for watching and I'll see you in the next course.