How to interpret your returned results

Modified on: Thu, 17 Oct, 2024 at 6:49 AM

In the top left corner of the Results Window, you will see the initial search input, To the right of your search input, you will see the number of Occurrences. This indicates the number of times this Name was matched to information held in the databases queried.


Hovering over the result brings up options to Copy, Add to Search, or, to use the forwarding arrow to Open Details. The CompromisedRecord list provides you with a list of websites that experienced a data breach. 


Where relevant, CompromisedRecord results are labelled Collection or similar. These represent aggregated data breaches flagged by our data partner. This type of result can be particularly interesting, and when opened, will show you all publicly breached data in a single list - pointing you towards more relevant results. 


If you click on the 'Open Details' arrow for any of these records, a detail window will indicate where Maltego Search sourced the resulting information, and what type of information related to this breach it was able to find.


In the same detail window, you will see the Data Lineage – this shows how Maltego Search went from the original search input to a specific result. If there are multiple data lineages available, this means that the same result was found in multiple databases. 


A larger number of data lineages can be indicative of a more relevant result. The Properties menu shows returned search metadata and other information related to the result, such as the database it was found in, IP address, URL, name, email, and others.

 

Did you find it helpful? Yes No

Send feedback
Sorry we couldn't be helpful. Help us improve this article with your feedback.