Overview
The Cybersixgill Transforms surface threat intelligence collected from the deep and dark web — underground forums, marketplaces, paste sites, and messaging platforms. Investigators can search collected posts by phrase, then pivot across threat actors, APTs, malware, IOCs, forums, and social profiles to build out an investigation.
Cybersixgill: Transforms
Search for this exact phrase [Cybersixgill]
Description
Searches for the exact phrase in Cybersixgill posts.
Transform Settings
maltego.cybersixgill.global.global#cybersixgill_client_id_settingmaltego.cybersixgill.global.global#cybersixgill_client_secret_settingmaltego.cybersixgill.to_posts_from_phrase_exact.date_range_settingmaltego.cybersixgill.to_posts_from_phrase_exact.sort_by_desc_settingmaltego.cybersixgill.to_posts_from_phrase_exact.filter_actor_names_setting
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Search for this exact phrase [Cybersixgill] |
| Author | Maltego Technologies |
| Data Source | Cybersixgill |
| Transform Name | maltego.cybersixgill.to_posts_from_phrase_exact |
| Short Description | Searches for the exact phrase in Cybersixgill posts. |
| Input Entities | maltego.Phrase |
| Output Entities | maltego.cybersixgill.Post |
Find posts related to phrase [Cybersixgill]
Description
Returns all posts related to the given phrase.
Transform Settings
maltego.cybersixgill.global.global#cybersixgill_client_id_settingmaltego.cybersixgill.global.global#cybersixgill_client_secret_settingmaltego.cybersixgill.to_posts_from_phrase.date_range_settingmaltego.cybersixgill.to_posts_from_phrase.sort_by_desc_setting
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Find posts related to phrase [Cybersixgill] |
| Author | Maltego Technologies |
| Data Source | Cybersixgill |
| Transform Name | maltego.cybersixgill.to_posts_from_phrase |
| Short Description | Returns all posts related to the given phrase. |
| Input Entities | maltego.Phrase |
| Output Entities | maltego.cybersixgill.Post |
Search for all of these words [Cybersixgill]
Description
Searches for all the words in the phrase in Cybersixgill posts.
Transform Settings
maltego.cybersixgill.global.global#cybersixgill_client_id_settingmaltego.cybersixgill.global.global#cybersixgill_client_secret_settingmaltego.cybersixgill.to_posts_from_all_phrase.date_range_settingmaltego.cybersixgill.to_posts_from_all_phrase.sort_by_desc_settingmaltego.cybersixgill.to_posts_from_all_phrase.filter_actor_names_setting
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Search for all of these words [Cybersixgill] |
| Author | Maltego Technologies |
| Data Source | Cybersixgill |
| Transform Name | maltego.cybersixgill.to_posts_from_all_phrase |
| Short Description | Searches for all the words in the phrase in Cybersixgill posts. |
| Input Entities | maltego.Phrase |
| Output Entities | maltego.cybersixgill.Post |
Search for any of these words [Cybersixgill]
Description
Searches for any of these words in the phrase in Cybersixgill posts.
Transform Settings
maltego.cybersixgill.global.global#cybersixgill_client_id_settingmaltego.cybersixgill.global.global#cybersixgill_client_secret_settingmaltego.cybersixgill.to_posts_from_any_phrase.date_range_settingmaltego.cybersixgill.to_posts_from_any_phrase.sort_by_desc_settingmaltego.cybersixgill.to_posts_from_any_phrase.filter_actor_names_setting
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Search for any of these words [Cybersixgill] |
| Author | Maltego Technologies |
| Data Source | Cybersixgill |
| Transform Name | maltego.cybersixgill.to_posts_from_any_phrase |
| Short Description | Searches for any of these words in the phrase in Cybersixgill posts. |
| Input Entities | maltego.Phrase |
| Output Entities | maltego.cybersixgill.Post |
Search in Posts (12 Months) [Cybersixgill]
Description
Returns all posts related to the given entity's value.
Transform Settings
maltego.cybersixgill.global.global#cybersixgill_client_id_settingmaltego.cybersixgill.global.global#cybersixgill_client_secret_settingmaltego.cybersixgill.to_posts_twelve_months.sort_by_desc_setting
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Search in Posts (12 Months) [Cybersixgill] |
| Author | Maltego Technologies |
| Data Source | Cybersixgill |
| Transform Name | maltego.cybersixgill.to_posts_twelve_months |
| Short Description | Returns all posts related to the given entity's value. |
| Input Entities | maltego.Organization |
| Output Entities | maltego.cybersixgill.Post |
Search in Posts (Custom Range) [Cybersixgill]
Description
Returns all posts related to the given entity's value.
Transform Settings
maltego.cybersixgill.global.global#cybersixgill_client_id_settingmaltego.cybersixgill.global.global#cybersixgill_client_secret_settingmaltego.cybersixgill.to_posts_custom_date.date_range_settingmaltego.cybersixgill.to_posts_custom_date.sort_by_desc_setting
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Search in Posts (Custom Range) [Cybersixgill] |
| Author | Maltego Technologies |
| Data Source | Cybersixgill |
| Transform Name | maltego.cybersixgill.to_posts_custom_date |
| Short Description | Returns all posts related to the given entity's value. |
| Input Entities | maltego.Organization |
| Output Entities | maltego.cybersixgill.Post |
Enrich Malware [Cybersixgill]
Description
Enriches the input malware with more information
Transform Settings
maltego.cybersixgill.global.global#cybersixgill_client_id_settingmaltego.cybersixgill.global.global#cybersixgill_client_secret_setting
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Enrich Malware [Cybersixgill] |
| Author | Maltego Technologies |
| Data Source | Cybersixgill |
| Transform Name | maltego.cybersixgill.enrich_malware |
| Short Description | Enriches the input malware with more information |
| Input Entities | maltego.STIX2.malware |
| Output Entities | maltego.STIX2.malware |
Enrich threat actor [Cybersixgill]
Description
Enriches the input threat actor with more information
Transform Settings
maltego.cybersixgill.global.global#cybersixgill_client_id_settingmaltego.cybersixgill.global.global#cybersixgill_client_secret_setting
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Enrich threat actor [Cybersixgill] |
| Author | Maltego Technologies |
| Data Source | Cybersixgill |
| Transform Name | maltego.cybersixgill.enrich_threat_actor |
| Short Description | Enriches the input threat actor with more information |
| Input Entities | maltego.cybersixgill.ThreatActor |
| Output Entities | maltego.cybersixgill.ThreatActor |
Extract entities [Cybersixgill]
Description
Extract entities mentioned in post
Transform Settings
maltego.cybersixgill.global.global#cybersixgill_client_id_settingmaltego.cybersixgill.global.global#cybersixgill_client_secret_setting
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Extract entities [Cybersixgill] |
| Author | Maltego Technologies |
| Data Source | Cybersixgill |
| Transform Name | maltego.cybersixgill.get_related_entities |
| Short Description | Extract entities mentioned in post |
| Input Entities | maltego.cybersixgill.Post |
| Output Entities | maltego.cybersixgill.Post, maltego.URL, maltego.EmailAddress, maltego.PhoneNumber, maltego.Alias, maltego.IPv4Address, maltego.affiliation.Twitter, maltego.ETHAddress, maltego.BTCAddress, maltego.LTCAddress |
Extract forum from post [Cybersixgill]
Description
Extracts the site/forum from the post
Transform Settings
No configurable settings.
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Extract forum from post [Cybersixgill] |
| Author | Maltego Technologies |
| Data Source | Cybersixgill |
| Transform Name | maltego.cybersixgill.extract_site_from_post |
| Short Description | Extracts the site/forum from the post |
| Input Entities | maltego.cybersixgill.Post |
| Output Entities | maltego.Phrase |
Extract Malware related to the APT [Cybersixgill]
Description
Returns malware related to the APT.
Transform Settings
No configurable settings.
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Extract Malware related to the APT [Cybersixgill] |
| Author | Maltego Technologies |
| Data Source | Cybersixgill |
| Transform Name | maltego.cybersixgill.to_related_malware_from_apt |
| Short Description | Returns malware related to the APT. |
| Input Entities | maltego.STIX2.intrusion-set |
| Output Entities | maltego.STIX2.malware |
Extract Other Aliases of APT [Cybersixgill]
Description
Returns all other aliases of APT.
Transform Settings
No configurable settings.
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Extract Other Aliases of APT [Cybersixgill] |
| Author | Maltego Technologies |
| Data Source | Cybersixgill |
| Transform Name | maltego.cybersixgill.to_other_names_from_apt |
| Short Description | Returns all other aliases of APT. |
| Input Entities | maltego.STIX2.intrusion-set |
| Output Entities | maltego.Alias |
Extract other Threat Actors from Threat Actor [Cybersixgill]
Description
Enriches the input threat actor with more information
Transform Settings
maltego.cybersixgill.global.global#cybersixgill_client_id_settingmaltego.cybersixgill.global.global#cybersixgill_client_secret_setting
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Extract other Threat Actors from Threat Actor [Cybersixgill] |
| Author | Maltego Technologies |
| Data Source | Cybersixgill |
| Transform Name | maltego.cybersixgill.extract_other_aliases_of_threat_actor |
| Short Description | Enriches the input threat actor with more information |
| Input Entities | maltego.cybersixgill.ThreatActor |
| Output Entities | maltego.cybersixgill.ThreatActor |
Extract Related APT names from Malware [Cybersixgill]
Description
Returns related APT names from the malware.
Transform Settings
maltego.cybersixgill.global.global#cybersixgill_client_id_settingmaltego.cybersixgill.global.global#cybersixgill_client_secret_setting
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Extract Related APT names from Malware [Cybersixgill] |
| Author | Maltego Technologies |
| Data Source | Cybersixgill |
| Transform Name | maltego.cybersixgill.to_related_apts_from_malware |
| Short Description | Returns related APT names from the malware. |
| Input Entities | maltego.STIX2.malware |
| Output Entities | maltego.STIX2.malware, maltego.Alias |
Extract threat actor from post [Cybersixgill]
Description
Extracts the threat actor from the post
Transform Settings
No configurable settings.
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Extract threat actor from post [Cybersixgill] |
| Author | Maltego Technologies |
| Data Source | Cybersixgill |
| Transform Name | maltego.cybersixgill.extract_actor_from_post |
| Short Description | Extracts the threat actor from the post |
| Input Entities | maltego.cybersixgill.Post |
| Output Entities | maltego.cybersixgill.ThreatActor |
Extract user's social profiles [Cybersixgill]
Description
Extracts the social profiles of the threat actor
Transform Settings
No configurable settings.
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Extract user's social profiles [Cybersixgill] |
| Author | Maltego Technologies |
| Data Source | Cybersixgill |
| Transform Name | maltego.cybersixgill.extract_social_from_actor |
| Short Description | Extracts the social profiles of the threat actor |
| Input Entities | maltego.cybersixgill.ThreatActor |
| Output Entities | maltego.Affiliation, maltego.EmailAddress, maltego.Alias |
Find APT from Alias [Cybersixgill]
Description
Returns APT with the matching alias.
Transform Settings
maltego.cybersixgill.global.global#cybersixgill_client_id_settingmaltego.cybersixgill.global.global#cybersixgill_client_secret_setting
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Find APT from Alias [Cybersixgill] |
| Author | Maltego Technologies |
| Data Source | Cybersixgill |
| Transform Name | maltego.cybersixgill.to_apt_from_alias |
| Short Description | Returns APT with the matching alias. |
| Input Entities | maltego.Alias |
| Output Entities | maltego.STIX2.intrusion-set |
Find IOCs related to APT [Cybersixgill]
Description
Returns all IOCs related to APT.
Transform Settings
maltego.cybersixgill.global.global#cybersixgill_client_id_settingmaltego.cybersixgill.global.global#cybersixgill_client_secret_setting
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Find IOCs related to APT [Cybersixgill] |
| Author | Maltego Technologies |
| Data Source | Cybersixgill |
| Transform Name | maltego.cybersixgill.to_iocs_from_apt |
| Short Description | Returns all IOCs related to APT. |
| Input Entities | maltego.STIX2.intrusion-set |
| Output Entities | maltego.Hash, maltego.IPv4Address, maltego.Domain, maltego.URL |
Find Malware from Alias [Cybersixgill]
Description
Returns malware with the matching alias.
Transform Settings
maltego.cybersixgill.global.global#cybersixgill_client_id_settingmaltego.cybersixgill.global.global#cybersixgill_client_secret_setting
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Find Malware from Alias [Cybersixgill] |
| Author | Maltego Technologies |
| Data Source | Cybersixgill |
| Transform Name | maltego.cybersixgill.to_malware_from_alias |
| Short Description | Returns malware with the matching alias. |
| Input Entities | maltego.Alias |
| Output Entities | maltego.STIX2.malware |
Find posts of the threat actor [Cybersixgill]
Description
Returns the posts of the threat actor
Transform Settings
maltego.cybersixgill.global.global#cybersixgill_client_id_settingmaltego.cybersixgill.global.global#cybersixgill_client_secret_settingmaltego.cybersixgill.to_posts_from_threat_actor.date_range_setting
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Find posts of the threat actor [Cybersixgill] |
| Author | Maltego Technologies |
| Data Source | Cybersixgill |
| Transform Name | maltego.cybersixgill.to_posts_from_threat_actor |
| Short Description | Returns the posts of the threat actor |
| Input Entities | maltego.cybersixgill.ThreatActor |
| Output Entities | maltego.cybersixgill.Post |
Find threat actors from Alias [Cybersixgill]
Description
Returns all threat actors across different sites with the given alias.
Transform Settings
maltego.cybersixgill.global.global#cybersixgill_client_id_settingmaltego.cybersixgill.global.global#cybersixgill_client_secret_setting
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Find threat actors from Alias [Cybersixgill] |
| Author | Maltego Technologies |
| Data Source | Cybersixgill |
| Transform Name | maltego.cybersixgill.to_threat_actors_from_alias |
| Short Description | Returns all threat actors across different sites with the given alias. |
| Input Entities | maltego.Phrase |
| Output Entities | maltego.cybersixgill.ThreatActor |
Workflows
To see how to use this data integration for darkweb or telegram dorking investigations, click here.