During your investigations, you might want to export graphs to a tabular format for use in other software, or to incorporate into a report.
Maltego's export options give you some flexibility in how the graph data is represented in these tables.
Let’s create a simple graph to export:
As before, the Graph Export Wizard allows you to choose whether you want to export the whole graph or just a selection.
Depending on what data you choose to include in the export, you might end up generating duplicate rows. Remove these duplicates automatically by checking the Remove duplicate rows option.
When choosing the export details, there are two main options:
Export a table containing the Source and Target Entities value only or;
Export a table with All Property Values.
When you want to export all the property values, you can choose that they are Grouped by Entity type with blank lines separating them, or as an Entity property flat map.
When you export the properties, you also get a list of the links in the graph, and there is an option to export that to a Separate Link file instead.
Exporting Source and Target Entity Values Only
For the above example graph, exporting only the source and target Entities will produce the following result:
Exporting All Property Values, Grouped by Entity type
Exporting the Entities with their properties, grouped by type, produces the table below.
The export also includes a list of the links, using the ‘EntityID’ reference to link two Entities.
These can be in a separate file or at the bottom of the list of Entities as in the example:
Data is grouped into two header rows and multiple property value rows.
The first row (1) includes the entity type and display values of the properties.
The second row (2) contains the property name.
The remaining rows (3) include the property values
Exporting All Property Values as a Flat Map
Exporting the Entities and their properties as a flat table produces a file like the one below. Notice that there is only one header-row, and that properties are only populated where relevant in an Entity. As an example, only the Website Entity has a value for the ‘ports’ property.
