SpyCloud
Modified on: Wed, 28 Aug, 2024 at 6:37 PM
Overview
Use SpyCloud data to pivot using emails, domains, IP addresses, usernames, passwords, location information, PII, and much more.
Investigators all over the world use SpyCloud’s continuously growing repository of 350+ billion recaptured darknet assets and 50+ SpyCloud Transforms for Maltego to accelerate their investigations.
[SC] To Account Secret
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| Display Name | [SC] To Account Secret |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToAccountSecretFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Alias(es)
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| Display Name | [SC] To Alias(es) |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToAliasesFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Breach Type
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| Display Name | [SC] To Breach Type |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToBreachTypeFromSpyCloudBreachSource |
| Short Description | |
| Input Entities | spycloud.BreachSource |
| Output Entities | Phrase |
[SC] To Breached Domain
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| Display Name | [SC] To Breached Domain |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToDomainFromSpyCloudBreachSource |
| Short Description | |
| Input Entities | spycloud.BreachSource |
| Output Entities | Phrase |
[SC] To Email Domain(s)
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| Display Name | [SC] To Email Domain(s) |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToEmailDomainFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Email Address(es)
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| Display Name | [SC] To Email Address(es) |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToEmailFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To GPS Coordinates
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| Display Name | [SC] To GPS Coordinates |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToGPSCoordinateFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To IPv4 Address(es)
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| Display Name | [SC] To IPv4 Address(es) |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToIPAddressesFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Location
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| Display Name | [SC] To Location |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToLocationFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| Display Name | [SC] To Media URLs |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToMediaUrlsFromSpyCloudBreachSource |
| Short Description | |
| Input Entities | spycloud.BreachSource |
| Output Entities | Phrase |
[SC] To Password(s)
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| Display Name | [SC] To Password(s) |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToPasswordsFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Person
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| Display Name | [SC] To Person |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToPersonFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Phone Number
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| Display Name | [SC] To Phone Number |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToPhoneNumberFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Plaintext Password
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| Display Name | [SC] To Plaintext Password |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToPlaintextPasswordsFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Social Network Handle(s)
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| Display Name | [SC] To Social Network Handle(s) |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSocialNetworkAliasesFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Breach Records using Username
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Username |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Short Description | |
| Output Entities | Phrase |
Variants
| ToSpyCloudBreachRecordsFromAlias | maltego.Alias |
| ToSpyCloudBreachRecordsFromBreachRecordAsUsername | spycloud.BreachRecord |
| ToSpyCloudBreachRecordsFromSocialFlickrAsUsername | maltego.affiliation.Flickr |
| ToSpyCloudBreachRecordsFromSocialTwitterAsUsername | maltego.affiliation.Twitter |
[SC] To Breach Records using Email Username
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Email Username |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Short Description | |
| Output Entities | Phrase |
Variants
| ToSpyCloudBreachRecordsFromAliasAsEmailUsername | maltego.Alias |
| ToSpyCloudBreachRecordsFromBreachRecordAsEmailUsername | spycloud.BreachRecord |
| ToSpyCloudBreachRecordsFromEmailAsEmailUsername | maltego.EmailAddress |
| ToSpyCloudBreachRecordsFromSocialFlickrAsEmailUsername | maltego.affiliation.Flickr |
| ToSpyCloudBreachRecordsFromSocialTwitterAsEmailUsername | maltego.affiliation.Twitter |
[SC] To Breach Records using Fuzzy Email Username
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Fuzzy Email Username |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Short Description | |
| Output Entities | Phrase |
Variants
| ToSpyCloudBreachRecordsFromAliasAsEmailUsernameFuzzy | maltego.Alias |
| ToSpyCloudBreachRecordsFromBreachRecordAsEmailUsernameFuzzy | spycloud.BreachRecord |
| ToSpyCloudBreachRecordsFromEmailAsEmailUsernameFuzzy | maltego.EmailAddress |
[SC] To Breach Records using Fuzzy Username
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Fuzzy Username |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Short Description | |
| Output Entities | Phrase |
Variants
| ToSpyCloudBreachRecordsFromAliasFuzzy | maltego.Alias |
| ToSpyCloudBreachRecordsFromBreachRecordAsUsernameFuzzy | spycloud.BreachRecord |
| ToSpyCloudBreachRecordsFromSocialFlickrAsUsernameFuzzy | maltego.affiliation.Flickr |
| ToSpyCloudBreachRecordsFromSocialTwitterAsUsernameFuzzy | maltego.affiliation.Twitter |
[SC] To Breach Records using DNS Name
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.type | Search Results Type | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using DNS Name |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromDNSName |
| Short Description | |
| Input Entities | maltego.DNSName |
| Output Entities | Phrase |
[SC] To Breach Records using Domain
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.type | Search Results Type | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Domain |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromDomain |
| Short Description | |
| Input Entities | maltego.Domain |
| Output Entities | Phrase |
[SC] To Breach Records using Email Address
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.hashQuery | Search using SHA1 hash | string | false | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Email Address |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromEmail |
| Short Description | |
| Input Entities | maltego.EmailAddress |
| Output Entities | Phrase |
[SC] To Breach Records using Email as Username
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Email as Username |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromEmailAsUsername |
| Short Description | |
| Input Entities | maltego.EmailAddress |
| Output Entities | Phrase |
[SC] To Breach Records using IPv4 Address
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using IPv4 Address |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromIPAddress |
| Short Description | |
| Input Entities | maltego.IPv4Address |
| Output Entities | Phrase |
[SC] To Breach Records using Netblock
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Netblock |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromNetblock |
| Short Description | |
| Input Entities | maltego.Netblock |
| Output Entities | Phrase |
[SC] To Breach Records using Phone Number
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Phone Number |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromPhoneNumber |
| Short Description | |
| Input Entities | maltego.PhoneNumber |
| Output Entities | Phrase |
[SC] To Breach Records using Plaintext Password
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Plaintext Password |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromPhrase |
| Short Description | |
| Input Entities | maltego.Phrase |
| Output Entities | Phrase |
[SC] To Breach Records using Fuzzy Plaintext Password
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Fuzzy Plaintext Password |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromPhraseFuzzy |
| Short Description | |
| Input Entities | maltego.Phrase |
| Output Entities | Phrase |
[SC] To Breach Records using Social Handle
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.type | Search Results Type | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Social Handle |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialAlias |
| Short Description | |
| Input Entities | maltego.Alias |
| Output Entities | Phrase |
[SC] To Breach Records using Fuzzy Social Handle
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.type | Search Results Type | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Fuzzy Social Handle |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialAliasFuzzy |
| Short Description | |
| Input Entities | maltego.Alias |
| Output Entities | Phrase |
[SC] To Breach Records from Social Facebook
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.type | Search Results Type | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records from Social Facebook |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialFacebook |
| Short Description | |
| Input Entities | maltego.affiliation.Facebook |
| Output Entities | Phrase |
[SC] To Breach Records Using Email Username
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records Using Email Username |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialFacebookAsEmailUsername |
| Short Description | |
| Input Entities | maltego.affiliation.Facebook |
| Output Entities | Phrase |
[SC] To Breach Records using Email Username Fuzzy
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Email Username Fuzzy |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Short Description | |
| Output Entities | Phrase |
Variants
| ToSpyCloudBreachRecordsFromSocialFacebookAsEmailUsernameFuzzy | maltego.affiliation.Facebook |
| ToSpyCloudBreachRecordsFromSocialFlickrAsEmailUsernameFuzzy | maltego.affiliation.Flickr |
[SC] To Breach Records Using Username
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records Using Username |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialFacebookAsUsername |
| Short Description | |
| Input Entities | maltego.affiliation.Facebook |
| Output Entities | Phrase |
[SC] To Breach Records Using Username Fuzzy
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records Using Username Fuzzy |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialFacebookAsUsernameFuzzy |
| Short Description | |
| Input Entities | maltego.affiliation.Facebook |
| Output Entities | Phrase |
[SC] To Breach Records from Social Facebook Fuzzy
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.type | Search Results Type | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records from Social Facebook Fuzzy |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialFacebookFuzzy |
| Short Description | |
| Input Entities | maltego.affiliation.Facebook |
| Output Entities | Phrase |
[SC] To Breach Records from Social Flickr
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.type | Search Results Type | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records from Social Flickr |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialFlickr |
| Short Description | |
| Input Entities | maltego.affiliation.Flickr |
| Output Entities | Phrase |
[SC] To Breach Records from Social Flickr Fuzzy
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.type | Search Results Type | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records from Social Flickr Fuzzy |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialFlickrFuzzy |
| Short Description | |
| Input Entities | maltego.affiliation.Flickr |
| Output Entities | Phrase |
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.type | Search Results Type | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records from Social Twitter |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialTwitter |
| Short Description | |
| Input Entities | maltego.affiliation.Twitter |
| Output Entities | Phrase |
[SC] To Breach Records Using Email Username Fuzzy
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records Using Email Username Fuzzy |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialTwitterAsEmailUsernameFuzzy |
| Short Description | |
| Input Entities | maltego.affiliation.Twitter |
| Output Entities | Phrase |
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.type | Search Results Type | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records from Social Twitter Fuzzy |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialTwitterFuzzy |
| Short Description | |
| Input Entities | maltego.affiliation.Twitter |
| Output Entities | Phrase |
[SC] To Breach Records using URL
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.type | Search Results Type | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using URL |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromURL |
| Short Description | |
| Input Entities | maltego.URL |
| Output Entities | Phrase |
[SC] To Breach Source
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Source |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Short Description | |
| Output Entities | Phrase |
Variants
| ToSpyCloudBreachSourceFromBreachID | spycloud.BreachID |
| ToSpyCloudBreachSourceFromSpyCloudBreachRecord | spycloud.BreachRecord |
[SC] To Botnet Domain
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| Display Name | [SC] To Botnet Domain |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToTargetDomainFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Botnet URL
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| Display Name | [SC] To Botnet URL |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToTargetURLFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To User Agent
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| Display Name | [SC] To User Agent |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToUserAgentFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To User Browser
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| Display Name | [SC] To User Browser |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToUserBrowserAgentFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To User Homepage
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| Display Name | [SC] To User Homepage |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToUserHomepageFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To User Hostname
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| Display Name | [SC] To User Hostname |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToUserHostnameFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To User O/S
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| Display Name | [SC] To User O/S |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToUserOSFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To User System Registered Organization
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| Display Name | [SC] To User System Registered Organization |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToUserSystemOrganizationFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To User System Registered Owner
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| Display Name | [SC] To User System Registered Owner |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToUserSystemOwnerFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To User Technologies
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| Display Name | [SC] To User Technologies |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToUserTechnologiesFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Breach ID
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| Display Name | [SC] To Breach ID |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToBreachIDFromSpyCloudBreachSource |
| Short Description | |
| Input Entities | spycloud.BreachSource |
| Output Entities | Phrase |
[SC] To Credit Card Number
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| Display Name | [SC] To Credit Card Number |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToCreditCardNumberFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Driver’s License
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| Display Name | [SC] To Driver’s License |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToDriversLicenseFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Machine ID
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| Display Name | [SC] To Machine ID |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToInfectedMachineIdsFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To National ID
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| Display Name | [SC] To National ID |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToNationalIdsFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Passport Number
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| Display Name | [SC] To Passport Number |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToPassportNumbersFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Social Security Number
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| Display Name | [SC] To Social Security Number |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSocialSecurityNumberFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To User System Domain
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| Display Name | [SC] To User System Domain |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToUserSystemDomainFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Breach Records using Bank Account Number
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.hashQuery | Search using SHA1 hash | string | false | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Bank Account Number |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromBankAccountNumber |
| Short Description | |
| Input Entities | maltego.BankAccount |
| Output Entities | Phrase |
[SC] To Breach Records using Credit Card Number
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Credit Card Number |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromCreditCardNumber |
| Short Description | |
| Input Entities | maltego.BankAccount |
| Output Entities | Phrase |
[SC] To Breach Records using Driver’s License
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.hashQuery | Search using SHA1 hash | string | false | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Driver’s License |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromDriversLicense |
| Short Description | |
| Input Entities | maltego.IdentificationNumber |
| Output Entities | Phrase |
[SC] To Breach Records using Machine ID
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Machine ID |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromInfectedMachineId |
| Short Description | |
| Input Entities | maltego.Computer |
| Output Entities | Phrase |
[SC] To Breach Records using National ID
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.hashQuery | Search using SHA1 hash | string | false | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using National ID |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromNationalId |
| Short Description | |
| Input Entities | maltego.IdentificationNumber |
| Output Entities | Phrase |
[SC] To Breach Records using Passport Number
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.hashQuery | Search using SHA1 hash | string | false | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Passport Number |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromPassportNumber |
| Short Description | |
| Input Entities | maltego.PassportNumber |
| Output Entities | Phrase |
[SC] To Breach Records using Social Security Number
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
| Display Name | [SC] To Breach Records using Social Security Number |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialSecurityNumber |
| Short Description | |
| Input Entities | maltego.IdentificationNumber |
| Output Entities | Phrase |
[SC] To Bank Account Number
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| Display Name | [SC] To Bank Account Number |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToBankAccountNumberFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |