Overview
When Maltego Graph is closed unexpectedly, it is possible to recover graphs that were open from graph backups (temp/cache files).
The next time Maltego Graph is started up, a list of the graph backups which are available to recover will be displayed.
Graph backups are updated periodically – the next update occurring 5 minutes after the previous update was saved.
Enable/Disable Graph Recovery
The Graph Recovery feature can be enabled/disabled through the Options screen, under the Files section.
Graph Recovery is enabled by default. This can be overridden if the machine running Maltego lacks run resources, and graph backup recovery creates an overhead on performance.
Note: Disabling the Graph Recovery feature terminates Maltego graph backup updates. Recovered graphs will not be offered at startup of the Maltego Graph application if this is disabled.
Graph Recovery Screen on Startup
When the Maltego Graph application is closed unexpectedly, the Graph Recovery screen will be displayed the next time Maltego is started up. A list of available graph backups will be presented. Clicking the Save button will trigger saving the graph backups to graph files.
Multiple selections can be made using the Graph Recovery list.
If none of the graph backups are selected and the Save button is clicked, a warning message will be displayed and you will be prompted to make a selection.
If some of the graph backups are not selected, a confirmation message will be displayed indicating that the unselected graph backups will be discarded without being recovered after the process.
If the Close button is clicked on the Graph Recovery screen, all graph backups displayed will be discarded, and deleted. This confirmation message is displayed as warning.
A save screen will be opened for every graph backup sequentially, so that the user may save each of them to a graph file individually. If the graph backup is for a new graph, the path that is offered will be for the home directory of the corresponding operating system.
If a graph file already exists, then the offered save location will be the same directory as the original graph file with and overwrite path offered.
If the graph file name already exists in the selected directory, the user is warned and asked for confirmation to overwrite the existing file. The user can proceed with the overwrite by clicking Yes, or can return to the save screen to rename the graph file by clicking No.
The user can abort recovering the graph file when the save screen is showing, by clicking Cancel. In this case, the user is warned that the graph backup will be discarded and will prompt for confirmation to proceed.
If all the selected graph backups are saved to graph files successfully, the Graph Recovery screen is closed automatically.
If at any time the graph file recovery operation is aborted with at least one of the backups selected, and the save procedures completed, the Graph Recovery screen will be displayed again to prompt user review for remaining available saves. At this point, the Graph Recovery screen can be closed manually, or the save process continued.
