Overview
Use SpyCloud data to pivot using emails, domains, IP addresses, usernames, passwords, location information, PII, and much more.
Investigators all over the world use SpyCloud’s continuously growing repository of 350+ billion recaptured darknet assets and 50+ SpyCloud Transforms for Maltego to accelerate their investigations.
SpyCloud Cybercrime Investigations: SpyCloud Transforms
[SC] To Account Secret
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Account Secret |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToAccountSecretFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Alias(es)
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Alias(es) |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToAliasesFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Breach Type
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Type |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToBreachTypeFromSpyCloudBreachSource |
| Short Description | |
| Input Entities | spycloud.BreachSource |
| Output Entities | Phrase |
[SC] To Breached Domain
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breached Domain |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToDomainFromSpyCloudBreachSource |
| Short Description | |
| Input Entities | spycloud.BreachSource |
| Output Entities | Phrase |
[SC] To Email Domain(s)
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Email Domain(s) |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToEmailDomainFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Email Address(es)
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Email Address(es) |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToEmailFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To GPS Coordinates
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To GPS Coordinates |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToGPSCoordinateFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To IPv4 Address(es)
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To IPv4 Address(es) |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToIPAddressesFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Location
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Location |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToLocationFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Media URLs
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Media URLs |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToMediaUrlsFromSpyCloudBreachSource |
| Short Description | |
| Input Entities | spycloud.BreachSource |
| Output Entities | Phrase |
[SC] To Password(s)
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Password(s) |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToPasswordsFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Person
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Person |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToPersonFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Phone Number
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Phone Number |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToPhoneNumberFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Plaintext Password
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Plaintext Password |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToPlaintextPasswordsFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Social Network Handle(s)
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Social Network Handle(s) |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSocialNetworkAliasesFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Breach Records using Username
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Records using Username |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Short Description | |
| Output Entities | Phrase |
Variants
| Transform Name | Input Entities |
|---|---|
| ToSpyCloudBreachRecordsFromAlias | maltego.Alias |
| ToSpyCloudBreachRecordsFromBreachRecordAsUsername | spycloud.BreachRecord |
| ToSpyCloudBreachRecordsFromSocialFlickrAsUsername | maltego.affiliation.Flickr |
| ToSpyCloudBreachRecordsFromSocialTwitterAsUsername | maltego.affiliation.Twitter |
[SC] To Breach Records using Email Username
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Records using Email Username |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Short Description | |
| Output Entities | Phrase |
Variants
| Transform Name | Input Entities |
|---|---|
| ToSpyCloudBreachRecordsFromAliasAsEmailUsername | maltego.Alias |
| ToSpyCloudBreachRecordsFromBreachRecordAsEmailUsername | spycloud.BreachRecord |
| ToSpyCloudBreachRecordsFromEmailAsEmailUsername | maltego.EmailAddress |
| ToSpyCloudBreachRecordsFromSocialFlickrAsEmailUsername | maltego.affiliation.Flickr |
| ToSpyCloudBreachRecordsFromSocialTwitterAsEmailUsername | maltego.affiliation.Twitter |
[SC] To Breach Records using Fuzzy Email Username
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Records using Fuzzy Email Username |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Short Description | |
| Output Entities | Phrase |
Variants
| Transform Name | Input Entities |
|---|---|
| ToSpyCloudBreachRecordsFromAliasAsEmailUsernameFuzzy | maltego.Alias |
| ToSpyCloudBreachRecordsFromBreachRecordAsEmailUsernameFuzzy | spycloud.BreachRecord |
| ToSpyCloudBreachRecordsFromEmailAsEmailUsernameFuzzy | maltego.EmailAddress |
[SC] To Breach Records using Fuzzy Username
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Records using Fuzzy Username |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Short Description | |
| Output Entities | Phrase |
Variants
| Transform Name | Input Entities |
|---|---|
| ToSpyCloudBreachRecordsFromAliasFuzzy | maltego.Alias |
| ToSpyCloudBreachRecordsFromBreachRecordAsUsernameFuzzy | spycloud.BreachRecord |
| ToSpyCloudBreachRecordsFromSocialFlickrAsUsernameFuzzy | maltego.affiliation.Flickr |
| ToSpyCloudBreachRecordsFromSocialTwitterAsUsernameFuzzy | maltego.affiliation.Twitter |
[SC] To Breach Records using DNS Name
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.type | Search Results Type | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Records using DNS Name |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromDNSName |
| Short Description | |
| Input Entities | maltego.DNSName |
| Output Entities | Phrase |
[SC] To Breach Records using Domain
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.type | Search Results Type | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Records using Domain |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromDomain |
| Short Description | |
| Input Entities | maltego.Domain |
| Output Entities | Phrase |
[SC] To Breach Records using Email Address
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.hashQuery | Search using SHA1 hash | string | false | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Records using Email Address |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromEmail |
| Short Description | |
| Input Entities | maltego.EmailAddress |
| Output Entities | Phrase |
[SC] To Breach Records using Email as Username
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Records using Email as Username |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromEmailAsUsername |
| Short Description | |
| Input Entities | maltego.EmailAddress |
| Output Entities | Phrase |
[SC] To Breach Records using IPv4 Address
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Records using IPv4 Address |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromIPAddress |
| Short Description | |
| Input Entities | maltego.IPv4Address |
| Output Entities | Phrase |
[SC] To Breach Records using Netblock
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Records using Netblock |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromNetblock |
| Short Description | |
| Input Entities | maltego.Netblock |
| Output Entities | Phrase |
[SC] To Breach Records using Phone Number
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Records using Phone Number |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromPhoneNumber |
| Short Description | |
| Input Entities | maltego.PhoneNumber |
| Output Entities | Phrase |
[SC] To Breach Records using Plaintext Password
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Records using Plaintext Password |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromPhrase |
| Short Description | |
| Input Entities | maltego.Phrase |
| Output Entities | Phrase |
[SC] To Breach Records using Fuzzy Plaintext Password
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Records using Fuzzy Plaintext Password |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromPhraseFuzzy |
| Short Description | |
| Input Entities | maltego.Phrase |
| Output Entities | Phrase |
[SC] To Breach Records using Social Handle
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.type | Search Results Type | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Records using Social Handle |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialAlias |
| Short Description | |
| Input Entities | maltego.Alias |
| Output Entities | Phrase |
[SC] To Breach Records using Fuzzy Social Handle
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.type | Search Results Type | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Records using Fuzzy Social Handle |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialAliasFuzzy |
| Short Description | |
| Input Entities | maltego.Alias |
| Output Entities | Phrase |
[SC] To Breach Records from Social Facebook
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.type | Search Results Type | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Records from Social Facebook |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialFacebook |
| Short Description | |
| Input Entities | maltego.affiliation.Facebook |
| Output Entities | Phrase |
[SC] To Breach Records Using Email Username
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Records Using Email Username |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialFacebookAsEmailUsername |
| Short Description | |
| Input Entities | maltego.affiliation.Facebook |
| Output Entities | Phrase |
[SC] To Breach Records using Email Username Fuzzy
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Records using Email Username Fuzzy |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Short Description | |
| Output Entities | Phrase |
Variants
| Transform Name | Input Entities |
|---|---|
| ToSpyCloudBreachRecordsFromSocialFacebookAsEmailUsernameFuzzy | maltego.affiliation.Facebook |
| ToSpyCloudBreachRecordsFromSocialFlickrAsEmailUsernameFuzzy | maltego.affiliation.Flickr |
[SC] To Breach Records Using Username
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Records Using Username |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialFacebookAsUsername |
| Short Description | |
| Input Entities | maltego.affiliation.Facebook |
| Output Entities | Phrase |
[SC] To Breach Records Using Username Fuzzy
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Records Using Username Fuzzy |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialFacebookAsUsernameFuzzy |
| Short Description | |
| Input Entities | maltego.affiliation.Facebook |
| Output Entities | Phrase |
[SC] To Breach Records from Social Facebook Fuzzy
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.type | Search Results Type | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Records from Social Facebook Fuzzy |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialFacebookFuzzy |
| Short Description | |
| Input Entities | maltego.affiliation.Facebook |
| Output Entities | Phrase |
[SC] To Breach Records from Social Flickr
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.type | Search Results Type | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Records from Social Flickr |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialFlickr |
| Short Description | |
| Input Entities | maltego.affiliation.Flickr |
| Output Entities | Phrase |
[SC] To Breach Records from Social Flickr Fuzzy
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.type | Search Results Type | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Records from Social Flickr Fuzzy |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialFlickrFuzzy |
| Short Description | |
| Input Entities | maltego.affiliation.Flickr |
| Output Entities | Phrase |
[SC] To Breach Records from Social Twitter
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.type | Search Results Type | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Records from Social Twitter |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialTwitter |
| Short Description | |
| Input Entities | maltego.affiliation.Twitter |
| Output Entities | Phrase |
[SC] To Breach Records Using Email Username Fuzzy
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Records Using Email Username Fuzzy |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialTwitterAsEmailUsernameFuzzy |
| Short Description | |
| Input Entities | maltego.affiliation.Twitter |
| Output Entities | Phrase |
[SC] To Breach Records from Social Twitter Fuzzy
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.type | Search Results Type | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Records from Social Twitter Fuzzy |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialTwitterFuzzy |
| Short Description | |
| Input Entities | maltego.affiliation.Twitter |
| Output Entities | Phrase |
[SC] To Breach Records using URL
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.type | Search Results Type | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Records using URL |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromURL |
| Short Description | |
| Input Entities | maltego.URL |
| Output Entities | Phrase |
[SC] To Breach Source
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Source |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Short Description | |
| Output Entities | Phrase |
Variants
| Transform Name | Input Entities |
|---|---|
| ToSpyCloudBreachSourceFromBreachID | spycloud.BreachID |
| ToSpyCloudBreachSourceFromSpyCloudBreachRecord | spycloud.BreachRecord |
[SC] To Botnet Domain
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Botnet Domain |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToTargetDomainFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Botnet URL
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Botnet URL |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToTargetURLFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To User Agent
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To User Agent |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToUserAgentFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To User Browser
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To User Browser |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToUserBrowserAgentFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To User Homepage
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To User Homepage |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToUserHomepageFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To User Hostname
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To User Hostname |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToUserHostnameFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To User O/S
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To User O/S |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToUserOSFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To User System Registered Organization
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To User System Registered Organization |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToUserSystemOrganizationFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To User System Registered Owner
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To User System Registered Owner |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToUserSystemOwnerFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To User Technologies
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To User Technologies |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToUserTechnologiesFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Breach ID
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach ID |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToBreachIDFromSpyCloudBreachSource |
| Short Description | |
| Input Entities | spycloud.BreachSource |
| Output Entities | Phrase |
[SC] To Credit Card Number
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Credit Card Number |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToCreditCardNumberFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Driver’s License
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Driver’s License |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToDriversLicenseFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Machine ID
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Machine ID |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToInfectedMachineIdsFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To National ID
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To National ID |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToNationalIdsFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Passport Number
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Passport Number |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToPassportNumbersFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Social Security Number
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Social Security Number |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSocialSecurityNumberFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To User System Domain
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To User System Domain |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToUserSystemDomainFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |
[SC] To Breach Records using Bank Account Number
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.hashQuery | Search using SHA1 hash | string | false | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Records using Bank Account Number |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromBankAccountNumber |
| Short Description | |
| Input Entities | maltego.BankAccount |
| Output Entities | Phrase |
[SC] To Breach Records using Credit Card Number
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Records using Credit Card Number |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromCreditCardNumber |
| Short Description | |
| Input Entities | maltego.BankAccount |
| Output Entities | Phrase |
[SC] To Breach Records using Driver’s License
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.hashQuery | Search using SHA1 hash | string | false | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Records using Driver’s License |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromDriversLicense |
| Short Description | |
| Input Entities | maltego.IdentificationNumber |
| Output Entities | Phrase |
[SC] To Breach Records using Machine ID
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Records using Machine ID |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromInfectedMachineId |
| Short Description | |
| Input Entities | maltego.Computer |
| Output Entities | Phrase |
[SC] To Breach Records using National ID
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.hashQuery | Search using SHA1 hash | string | false | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Records using National ID |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromNationalId |
| Short Description | |
| Input Entities | maltego.IdentificationNumber |
| Output Entities | Phrase |
[SC] To Breach Records using Passport Number
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.hashQuery | Search using SHA1 hash | string | false | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Records using Passport Number |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromPassportNumber |
| Short Description | |
| Input Entities | maltego.PassportNumber |
| Output Entities | Phrase |
[SC] To Breach Records using Social Security Number
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
| spycloud.search.severity | Search Results Severity | string | any | True | True | False |
| spycloud.search.since | Search Results Since | string | 1970-01-01 | True | True | False |
| spycloud.search.sourceId | Search Results Source ID | string | any | True | True | False |
| spycloud.search.until | Search Results Until | string | 9999-12-31 | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Breach Records using Social Security Number |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToSpyCloudBreachRecordsFromSocialSecurityNumber |
| Short Description | |
| Input Entities | maltego.IdentificationNumber |
| Output Entities | Phrase |
[SC] To Bank Account Number
Transform Settings
| Setting Name | Display Name | Setting Type | Default Value | Optional | Popup | Authentication |
|---|---|---|---|---|---|---|
| spycloud.api.endpoint | SpyCloud API Endpoint | string | `LINK < https://spycloud.com/products/cyber | crime-inves | tigations/ | >`_ | True | True | False |
| spycloud.api.key | SpyCloud API Key | string | Your SpyCloud API Key | True | True | False |
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | [SC] To Bank Account Number |
| Owner | SpyCloud |
| Author | devops@spycloud.com |
| Data Source | SC |
| Transform Name | ToBankAccountNumberFromSpyCloudBreachRecord |
| Short Description | |
| Input Entities | spycloud.BreachRecord |
| Output Entities | Phrase |