Overview
The DarkOwl Transforms provide access to DarkOwl Vision, a large index of darknet content (Tor, I2P, Zeronet), paste sites, and leak data. Investigators can run keyword/dork searches or exact-phrase searches over posts and leak records, then extract and pivot on entities found within results.
DarkOwl: Transforms
Search Posts (exact) [DarkOwl]
Description
Returns exact matches for the search phrase, except for the leak records
Transform Settings
maltego.jinxpy_darkowl.global.global#darkowl_private_keymaltego.jinxpy_darkowl.global.global#darkowl_public_keymaltego.jinxpy_darkowl.search_posts_exact.include_resourcesmaltego.jinxpy_darkowl.search_posts_exact.exclude_resourcesmaltego.jinxpy_darkowl.search_posts_exact.sort_by_settingmaltego.jinxpy_darkowl.search_posts_exact.date_crawled_settingmaltego.jinxpy_darkowl.search_posts_exact.extract_entities
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Search Posts (exact) [DarkOwl] |
| Author | Maltego Technologies |
| Data Source | DarkOwl |
| Transform Name | maltego.jinxpy_darkowl.search_posts_exact |
| Short Description | Returns exact matches for the search phrase, except for the leak records |
| Input Entities | maltego.Phrase |
| Output Entities | maltego.darkowl.DarkowlPost, maltego.darkowl.DarkowlLeakRecord, maltego.EmailAddress, maltego.CryptocurrencyAddress, maltego.Domain, maltego.IPv4Address, maltego.IPv6Address, maltego.IdentificationNumber, maltego.Tag |
Search in Leaks [DarkOwl]
Description
Returns matches for the search query found in leak records
Transform Settings
maltego.jinxpy_darkowl.global.global#darkowl_private_keymaltego.jinxpy_darkowl.global.global#darkowl_public_keymaltego.jinxpy_darkowl.search_in_leaks.sort_by_settingmaltego.jinxpy_darkowl.search_in_leaks.date_crawled_setting
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Search in Leaks [DarkOwl] |
| Author | Maltego Technologies |
| Data Source | DarkOwl |
| Transform Name | maltego.jinxpy_darkowl.search_in_leaks |
| Short Description | Returns matches for the search query found in leak records |
| Input Entities | maltego.Phrase |
| Output Entities | maltego.darkowl.DarkowlLeakRecord, maltego.EmailAddress, maltego.HashPassword, maltego.PlaintextPassword |
Search Posts (dorking) [DarkOwl]
Description
Returns matches for the search query, except for the leak records
Transform Settings
maltego.jinxpy_darkowl.global.global#darkowl_private_keymaltego.jinxpy_darkowl.global.global#darkowl_public_keymaltego.jinxpy_darkowl.search_posts.include_resourcesmaltego.jinxpy_darkowl.search_posts.exclude_resourcesmaltego.jinxpy_darkowl.search_posts.sort_by_settingmaltego.jinxpy_darkowl.search_posts.date_crawled_settingmaltego.jinxpy_darkowl.search_posts.extract_entities
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Search Posts (dorking) [DarkOwl] |
| Author | Maltego Technologies |
| Data Source | DarkOwl |
| Transform Name | maltego.jinxpy_darkowl.search_posts |
| Short Description | Returns matches for the search query, except for the leak records |
| Input Entities | maltego.Phrase |
| Output Entities | maltego.darkowl.DarkowlPost, maltego.darkowl.DarkowlLeakRecord, maltego.EmailAddress, maltego.CryptocurrencyAddress, maltego.Domain, maltego.IPv4Address, maltego.IPv6Address, maltego.IdentificationNumber, maltego.Tag |
Search Posts by Crypto [DarkOwl]
Description
Returns posts with information about a cryptocurrency address
Transform Settings
maltego.jinxpy_darkowl.global.global#darkowl_private_keymaltego.jinxpy_darkowl.global.global#darkowl_public_keymaltego.jinxpy_darkowl.search_posts_by_crypto.date_crawled_settingmaltego.jinxpy_darkowl.search_posts_by_crypto.entity_sort_by_setting
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Search Posts by Crypto [DarkOwl] |
| Author | Maltego Technologies |
| Data Source | DarkOwl |
| Transform Name | maltego.jinxpy_darkowl.search_posts_by_crypto |
| Short Description | Returns posts with information about a cryptocurrency address |
| Input Entities | maltego.CryptocurrencyAddress |
| Output Entities | maltego.darkowl.DarkowlPostfragment, maltego.darkowl.DarkowlLeakRecord |
Search Posts by Email [DarkOwl]
Description
Returns posts with information about an email address
Transform Settings
maltego.jinxpy_darkowl.global.global#darkowl_private_keymaltego.jinxpy_darkowl.global.global#darkowl_public_keymaltego.jinxpy_darkowl.search_posts_by_email.date_crawled_settingmaltego.jinxpy_darkowl.search_posts_by_email.entity_sort_by_setting
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Search Posts by Email [DarkOwl] |
| Author | Maltego Technologies |
| Data Source | DarkOwl |
| Transform Name | maltego.jinxpy_darkowl.search_posts_by_email |
| Short Description | Returns posts with information about an email address |
| Input Entities | maltego.EmailAddress |
| Output Entities | maltego.darkowl.DarkowlPostfragment, maltego.darkowl.DarkowlLeakRecord, maltego.EmailAddress, maltego.HashPassword, maltego.PlaintextPassword |
Search Posts by Email Domain [DarkOwl]
Description
Returns posts with information about an email domain
Transform Settings
maltego.jinxpy_darkowl.global.global#darkowl_private_keymaltego.jinxpy_darkowl.global.global#darkowl_public_keymaltego.jinxpy_darkowl.search_posts_by_email_domain.date_crawled_settingmaltego.jinxpy_darkowl.search_posts_by_email_domain.entity_sort_by_setting
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Search Posts by Email Domain [DarkOwl] |
| Author | Maltego Technologies |
| Data Source | DarkOwl |
| Transform Name | maltego.jinxpy_darkowl.search_posts_by_email_domain |
| Short Description | Returns posts with information about an email domain |
| Input Entities | maltego.Domain |
| Output Entities | maltego.darkowl.DarkowlPostfragment, maltego.darkowl.DarkowlLeakRecord, maltego.EmailAddress |
Search Posts by IP Address [DarkOwl]
Description
Returns posts with information about an IP address
Transform Settings
maltego.jinxpy_darkowl.global.global#darkowl_private_keymaltego.jinxpy_darkowl.global.global#darkowl_public_keymaltego.jinxpy_darkowl.search_posts_by_ip_address.date_crawled_settingmaltego.jinxpy_darkowl.search_posts_by_ip_address.entity_sort_by_setting
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Search Posts by IP Address [DarkOwl] |
| Author | Maltego Technologies |
| Data Source | DarkOwl |
| Transform Name | maltego.jinxpy_darkowl.search_posts_by_ip_address |
| Short Description | Returns posts with information about an IP address |
| Input Entities | maltego.IPv4Address |
| Output Entities | maltego.darkowl.DarkowlPostfragment, maltego.darkowl.DarkowlLeakRecord |
Extract Entities [DarkOwl]
Description
Extract entities found in the DarkOwl post
Transform Settings
No configurable settings.
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Extract Entities [DarkOwl] |
| Author | Maltego Technologies |
| Data Source | DarkOwl |
| Transform Name | maltego.jinxpy_darkowl.extract_entities_from_darkowl_post |
| Short Description | Extract entities found in the DarkOwl post |
| Input Entities | maltego.darkowl.DarkowlPost |
| Output Entities | maltego.Unknown |
Get Full Post [DarkOwl]
Description
Returns full information about the post to which the fragment belongs
Transform Settings
maltego.jinxpy_darkowl.global.global#darkowl_private_keymaltego.jinxpy_darkowl.global.global#darkowl_public_key
Transform Meta Info
| Information | Value |
|---|---|
| Display Name | Get Full Post [DarkOwl] |
| Author | Maltego Technologies |
| Data Source | DarkOwl |
| Transform Name | maltego.jinxpy_darkowl.search_posts_by_fragment |
| Short Description | Returns full information about the post to which the fragment belongs |
| Input Entities | maltego.darkowl.DarkowlPostfragment |
| Output Entities | maltego.Unknown |
Workflows
To see how to use this data integration for darkweb or telegram dorking investigations, click here.