Maltego Regex Transforms

Modified on Wed, 28 Aug, 2024 at 4:46 PM

Overview

Regex Library Transforms helps analysts to extract matching objects from web pages using defined well-known “Regular Expressions” patterns (known as regex).

Investigators can now quickly extract useful information like emails, phone numbers, bitcoin addresses and many more from a web page for free using customizable regex patterns.

Read more about Regex Transforms for Maltego on our website here.

Maltego Regex Transforms: regex-lib Transforms

To Card Numbers [Regex]

Description

Finds card number matches

Transform Settings

Setting Name	Display Name	Setting Type	Default Value	Optional	Popup	Authentication
maltego.regex-lib.to_card_numbers.pattern	Regex pattern (Python style)	string	(?:`\d{4}`[- ]){3}`\d{4}`	`\d{16}`	True	True

Transform Meta Info

Information	Value
Display Name	To Card Numbers [Regex]
Owner
Author	Maltego Technologies
Data Source	Regex
Transform Name	maltego.regex-lib.to_card_numbers
Short Description	Finds card number matches
Input Entities	maltego.URL
Output Entities	maltego.BankCard

To IBAN [Regex]

Description

Finds IBAN matches

Transform Settings

Setting Name	Display Name	Setting Type	Default Value	Optional	Popup	Authentication
maltego.regex-lib.to_bank_accounts.pattern	Regex pattern (Python style)	string	[a-zA-Z]{2}[0-9]{2}[a-zA-Z0-9]{4}[0-9]{7}(?:[a-zA-Z0-9]?){0,16}	True	True	False

Transform Meta Info

Information	Value
Display Name	To IBAN [Regex]
Owner
Author	Maltego Technologies
Data Source	Regex
Transform Name	maltego.regex-lib.to_bank_accounts
Short Description	Finds IBAN matches
Input Entities	maltego.URL
Output Entities	maltego.BankAccount

To BTC Addresses [Regex]

Description

Finds BTC address matches

Transform Settings

Setting Name	Display Name	Setting Type	Default Value	Optional	Popup	Authentication
maltego.regex-lib.to_btc_addresses.pattern	Regex pattern (Python style)	string	(?:[13]	bc1)[a-zA-HJ-NP-Z0-9]{26,62}	True	True

Transform Meta Info

Information	Value
Display Name	To BTC Addresses [Regex]
Owner
Author	Maltego Technologies
Data Source	Regex
Transform Name	maltego.regex-lib.to_btc_addresses
Short Description	Finds BTC address matches
Input Entities	maltego.URL
Output Entities	maltego.BTCAddress

To ETH Addresses [Regex]

Description

Finds ETH address matches

Transform Settings

Setting Name	Display Name	Setting Type	Default Value	Optional	Popup	Authentication
maltego.regex-lib.to_eth_addresses.pattern	Regex pattern (Python style)	string	`\b0x`[a-fA-F0-9]{40}`\b \|` True	True	False

Transform Meta Info

Information	Value
Display Name	To ETH Addresses [Regex]
Owner
Author	Maltego Technologies
Data Source	Regex
Transform Name	maltego.regex-lib.to_eth_addresses
Short Description	Finds ETH address matches
Input Entities	maltego.URL
Output Entities	maltego.ETHAddress

To BTC Transactions [Regex]

Description

Finds BTC transaction matches

Transform Settings

Setting Name	Display Name	Setting Type	Default Value	Optional	Popup	Authentication
maltego.regex-lib.to_btc_transactions.pattern	Regex pattern (Python style)	string	(?:[13]	bc1)[a-zA-HJ-NP-Z0-9]{26,62}	True	True

Transform Meta Info

Information	Value
Display Name	To BTC Transactions [Regex]
Owner
Author	Maltego Technologies
Data Source	Regex
Transform Name	maltego.regex-lib.to_btc_transactions
Short Description	Finds BTC transaction matches
Input Entities	maltego.URL
Output Entities	maltego.BTCTransaction

To ETH Transactions [Regex]

Description

Finds ETH transaction matches

Transform Settings

Setting Name	Display Name	Setting Type	Default Value	Optional	Popup	Authentication
maltego.regex-lib.to_eth_transactions.pattern	Regex pattern (Python style)	string	`\b0x`(?:[A-Fa-f0-9]{64})`\b \|` True	True	False

Transform Meta Info

Information	Value
Display Name	To ETH Transactions [Regex]
Owner
Author	Maltego Technologies
Data Source	Regex
Transform Name	maltego.regex-lib.to_eth_transactions
Short Description	Finds ETH transaction matches
Input Entities	maltego.URL
Output Entities	maltego.ETHTransaction

To CVEs [Regex]

Description

Finds CVE matches

Transform Settings

Setting Name	Display Name	Setting Type	Default Value	Optional	Popup	Authentication
maltego.regex-lib.to_cves.pattern	Regex pattern (Python style)	string	CVE-`\d{4}`-`\d* \|` True	True	False

Transform Meta Info

Information	Value
Display Name	To CVEs [Regex]
Owner
Author	Maltego Technologies
Data Source	Regex
Transform Name	maltego.regex-lib.to_cves
Short Description	Finds CVE matches
Input Entities	maltego.URL
Output Entities	maltego.CVE

To Attack Technique IDs [Regex]

Description

Finds attack technique ID matches

Transform Settings

Setting Name	Display Name	Setting Type	Default Value	Optional	Popup	Authentication
maltego.regex-lib.to_attack_ids.pattern	Regex pattern (Python style)	string	T`\d{4}`(?:.`\d{3}`)?	True	True	False

Transform Meta Info

Information	Value
Display Name	To Attack Technique IDs [Regex]
Owner
Author	Maltego Technologies
Data Source	Regex
Transform Name	maltego.regex-lib.to_attack_ids
Short Description	Finds attack technique ID matches
Input Entities	maltego.URL
Output Entities	maltego.AttackTechniqueID

To Defanged URLs [Regex]

Description

Finds defanged URL matches

Transform Settings

Setting Name	Display Name	Setting Type	Default Value	Optional	Popup	Authentication
maltego.regex-lib.to_defanged_urls.pattern	Regex pattern (Python style)	string	(?:h..ps?	f.p)://(?:www(?:.	[.])	(?!www))[a-zA-Z0-9][a-zA-Z0-9-]+[a-zA-Z0-9](?:.

Transform Meta Info

Information	Value
Display Name	To Defanged URLs [Regex]
Owner
Author	Maltego Technologies
Data Source	Regex
Transform Name	maltego.regex-lib.to_defanged_urls
Short Description	Finds defanged URL matches
Input Entities	maltego.URL
Output Entities	maltego.DefangedURL

To MAC Addresses [Regex]

Description

Finds MAC address matches

Transform Settings

Setting Name	Display Name	Setting Type	Default Value	Optional	Popup	Authentication
maltego.regex-lib.to_mac_addresses.pattern	Regex pattern (Python style)	string	(?:[a-fA-F0-9]{2}[:-]){5}[a-fA-F0-9]{2}	True	True	False

Transform Meta Info

Information	Value
Display Name	To MAC Addresses [Regex]
Owner
Author	Maltego Technologies
Data Source	Regex
Transform Name	maltego.regex-lib.to_mac_addresses
Short Description	Finds MAC address matches
Input Entities	maltego.URL
Output Entities	maltego.MacAddress

To IPv4 Addresses [Regex]

Description

Finds IPv4 address matches

Transform Settings

Setting Name	Display Name	Setting Type	Default Value	Optional	Popup	Authentication
maltego.regex-lib.to_ipv4_addresses.pattern	Regex pattern (Python style)	string	(?:25[0-5]	2[0-4]`\d\|`[0-1]?`\d{1,2}`)(?:.(?:25[0-5]	2[0-4]`\d\|`[0-1]?`\d{1,2}`)){3}	True

Transform Meta Info

Information	Value
Display Name	To IPv4 Addresses [Regex]
Owner
Author	Maltego Technologies
Data Source	Regex
Transform Name	maltego.regex-lib.to_ipv4_addresses
Short Description	Finds IPv4 address matches
Input Entities	maltego.URL
Output Entities	maltego.IPv4Address

To IPv6 Addresses [Regex]

Description

Finds IPv6 address matches

Transform Settings

Setting Name	Display Name	Setting Type	Default Value	Optional	Popup	Authentication
maltego.regex-lib.to_ipv6_addresses.pattern	Regex pattern (Python style)	string	[0-9a-fA-F]{1,4}(?::[0-9a-fA-F]{1,4}){7}	(?:(?:[0-9A-Fa-f]{1,4}(?::[0-9A-Fa-f]{1,4}){0,5})?)::(?:(?:[0-9A-Fa-f]{1,4}(?::[0-9A-Fa-f]{1,4}){0,5})?)	True	True

Transform Meta Info

Information	Value
Display Name	To IPv6 Addresses [Regex]
Owner
Author	Maltego Technologies
Data Source	Regex
Transform Name	maltego.regex-lib.to_ipv6_addresses
Short Description	Finds IPv6 address matches
Input Entities	maltego.URL
Output Entities	maltego.IPv6Address

To Domains [Regex]

Description

Finds domain matches

Transform Settings

Setting Name	Display Name	Setting Type	Default Value	Optional	Popup	Authentication
maltego.regex-lib.to_domains.pattern	Regex pattern (Python style)	string	(?:a-z0-9?.)+[a-z0-9][a-z0-9-]{0,61}[a-z0-9]	True	True	False

Transform Meta Info

Information	Value
Display Name	To Domains [Regex]
Owner
Author	Maltego Technologies
Data Source	Regex
Transform Name	maltego.regex-lib.to_domains
Short Description	Finds domain matches
Input Entities	maltego.URL
Output Entities	maltego.Domain

To URLs [Regex]

Description

Finds URL matches

Transform Settings

Setting Name	Display Name	Setting Type	Default Value	Optional	Popup	Authentication
maltego.regex-lib.to_urls.pattern	Regex pattern (Python style)	string	https?://`\S`+	True	True	False

Transform Meta Info

Information	Value
Display Name	To URLs [Regex]
Owner
Author	Maltego Technologies
Data Source	Regex
Transform Name	maltego.regex-lib.to_urls
Short Description	Finds URL matches
Input Entities	maltego.URL
Output Entities	maltego.URL

To SSNs [Regex]

Description

Finds social security number matches

Transform Settings

Setting Name	Display Name	Setting Type	Default Value	Optional	Popup	Authentication
maltego.regex-lib.to_ssns.pattern	Regex pattern (Python style)	string	(?!666	000	9`\d{2}`)`\d{3}`-(?!00)`\d{2}`-(?!0{4})`\d{4}`	True

Transform Meta Info

Information	Value
Display Name	To SSNs [Regex]
Owner
Author	Maltego Technologies
Data Source	Regex
Transform Name	maltego.regex-lib.to_ssns
Short Description	Finds social security number matches
Input Entities	maltego.URL
Output Entities	maltego.SSN

To VINs [Regex]

Description

Finds vehicle identification number matches

Transform Settings

Setting Name	Display Name	Setting Type	Default Value	Optional	Popup	Authentication
maltego.regex-lib.to_vins.pattern	Regex pattern (Python style)	string	[(A-H	J-N	P	R-Z

Transform Meta Info

Information	Value
Display Name	To VINs [Regex]
Owner
Author	Maltego Technologies
Data Source	Regex
Transform Name	maltego.regex-lib.to_vins
Short Description	Finds vehicle identification number matches
Input Entities	maltego.URL
Output Entities	maltego.VinNumber

To Emails [Regex]

Description

Finds email matches

Transform Settings

Setting Name	Display Name	Setting Type	Default Value	Optional	Popup	Authentication
maltego.regex-lib.to_emails.pattern	Regex pattern (Python style)	string	[a-zA-Z0-9!#$%&’*+/=?`{	}~^.-]+@[a-zA-Z0-9.-]+.[a-zA-Z]+	True	True

Transform Meta Info

Information	Value
Display Name	To Emails [Regex]
Owner
Author	Maltego Technologies
Data Source	Regex
Transform Name	maltego.regex-lib.to_emails
Short Description	Finds email matches
Input Entities	maltego.URL
Output Entities	maltego.EmailAddress

To Hashtags [Regex]

Description

Finds hashtag matches

Transform Settings

Setting Name	Display Name	Setting Type	Default Value	Optional	Popup	Authentication
maltego.regex-lib.to_hashtags.pattern	Regex pattern (Python style)	string	#[a-zA-Z0-9]+	True	True	False

Transform Meta Info

Information	Value
Display Name	To Hashtags [Regex]
Owner
Author	Maltego Technologies
Data Source	Regex
Transform Name	maltego.regex-lib.to_hashtags
Short Description	Finds hashtag matches
Input Entities	maltego.URL
Output Entities	maltego.hashtag

To Mentions [Regex]

Description

Finds mention matches

Transform Settings

Setting Name	Display Name	Setting Type	Default Value	Optional	Popup	Authentication
maltego.regex-lib.to_mentions.pattern	Regex pattern (Python style)	string	@[a-zA-Z0-9]+	True	True	False

Transform Meta Info

Information	Value
Display Name	To Mentions [Regex]
Owner
Author	Maltego Technologies
Data Source	Regex
Transform Name	maltego.regex-lib.to_mentions
Short Description	Finds mention matches
Input Entities	maltego.URL
Output Entities	maltego.Alias

To Hashes [Regex]

Description

Finds hash matches

Transform Settings

Setting Name	Display Name	Setting Type	Default Value	Optional	Popup	Authentication
maltego.regex-lib.to_hashes.pattern	Regex pattern (Python style)	string	[A-Fa-f0-9]{64}	[a-fA-F0-9]{40}	[a-fA-F0-9]{32}	True

Transform Meta Info

Information	Value
Display Name	To Hashes [Regex]
Owner
Author	Maltego Technologies
Data Source	Regex
Transform Name	maltego.regex-lib.to_hashes
Short Description	Finds hash matches
Input Entities	maltego.URL
Output Entities	maltego.Hash

To UUID/GUID [Regex]

Description

Finds UUID/GUID matches

Transform Settings

Setting Name	Display Name	Setting Type	Default Value	Optional	Popup	Authentication
maltego.regex-lib.to_uid.pattern	Regex pattern (Python style)	string	(?:[a-fA-F`\d]`{8})-?(?:[a-fA-F`\d]`{4})-?(?:[a-fA-F`\d]`{4})-?(?:[a-fA-F`\d]`{4})-?(?:[a-fA-F`\d]`{12})	True	True	False

Transform Meta Info

Information	Value
Display Name	To UUID/GUID [Regex]
Owner
Author	Maltego Technologies
Data Source	Regex
Transform Name	maltego.regex-lib.to_uid
Short Description	Finds UUID/GUID matches
Input Entities	maltego.URL
Output Entities	maltego.UniqueIdentifier

Custom regex pattern 1 [Regex]

Description

Define your regex in Transform Inputs

Transform Settings

Setting Name	Display Name	Setting Type	Default Value	Optional	Popup	Authentication
maltego.regex-lib.custom1.name	Regex name	string	None	True	True	False
maltego.regex-lib.custom1.pattern	Regex pattern (Python style)	string	None	True	True	False

Transform Meta Info

Information	Value
Display Name	Custom regex pattern 1 [Regex]
Owner
Author	Maltego Technologies
Data Source	Regex
Transform Name	maltego.regex-lib.custom1
Short Description	Define your regex in Transform Inputs
Input Entities	maltego.URL
Output Entities	maltego.Phrase

Custom regex pattern 2 [Regex]

Description

Define your regex in Transform Inputs

Transform Settings

Setting Name	Display Name	Setting Type	Default Value	Optional	Popup	Authentication
maltego.regex-lib.custom2.name	Regex name	string	None	True	True	False
maltego.regex-lib.custom2.pattern	Regex pattern (Python style)	string	None	True	True	False

Transform Meta Info

Information	Value
Display Name	Custom regex pattern 2 [Regex]
Owner
Author	Maltego Technologies
Data Source	Regex
Transform Name	maltego.regex-lib.custom2
Short Description	Define your regex in Transform Inputs
Input Entities	maltego.URL
Output Entities	maltego.Phrase

Custom regex pattern 3 [Regex]

Description

Define your regex in Transform Inputs

Transform Settings

Setting Name	Display Name	Setting Type	Default Value	Optional	Popup	Authentication
maltego.regex-lib.custom3.name	Regex name	string	None	True	True	False
maltego.regex-lib.custom3.pattern	Regex pattern (Python style)	string	None	True	True	False

Transform Meta Info

Information	Value
Display Name	Custom regex pattern 3 [Regex]
Owner
Author	Maltego Technologies
Data Source	Regex
Transform Name	maltego.regex-lib.custom3
Short Description	Define your regex in Transform Inputs
Input Entities	maltego.URL
Output Entities	maltego.Phrase