GreyNoise Maltego Transforms

March 14, 2023 ยท View on GitHub

main License: MIT

GreyNoise Maltego Transforms

This repo includes a transforms for Maltego to query the GreyNoise APIs.

More details about Maltego here: https://www.maltego.com/

Usage

Initial Configuration

In order to use the GreyNoise transform, install the Integration from the Transform Hub. Then, configure the transform using a GreyNoise API key.

If you don't have a GreyNoise API key, you can sign up for a free trial at https://viz.greynoise.io/signup

Instructions for running locally in Maltego

  1. Clone this repo to /repos/ (you may use an alternate directory, but will need to update the transforms after import)
  2. Create a local virtual environment named repos/venv
  3. Import greynoise.mtz into Maltego
  4. Go to Transforms -> Transform Manager
  5. Find the GreyNoiseCommunityIPLookup transforms, and update the commandline and working directory settings to match that of your local setup
  6. Update the api_key in the transforms/GreyNoiseCommunityIPLookup.py file

Repeat steps 5 & 6 for additional transforms

Values for creating a Manual Transform Seed for Community API

  • ID: GreyNoise Community
  • Name: GreyNoise Community
  • Seed URL: https://cetas.paterva.com/runner/showseed/greynoisecommunity
  • Icon URL: https://viz.greynoise.io/favicon.ico

Values for creating a Manual Transform Seed for Enterprise API

  • ID: GreyNoise
  • Name: GreyNoise
  • Seed URL: https://cetas.paterva.com/runner/showseed/greynoiseenterprise
  • Icon URL: https://viz.greynoise.io/favicon.ico

Values for creating a Manual Transform Seed for Development work

  • ID: GreyNoise Dev
  • Name: GreyNoise Dev
  • Seed URL: https://cetas.paterva.com/runner/showseed/jFUjpWPnZCliFvcE2DyragzC
  • Icon URL: https://viz.greynoise.io/favicon.ico

Contributing

Please read CONTRIBUTING.md for details on our code of conduct, and the process for submitting pull requests to us.

Versioning

We use SemVer for versioning. For the versions available, see the tags on this repository.

Authors

See also the list of contributors who participated in this project.

Contact Us

Have any questions or comments about GreyNoise? Contact us at integrations@greynoise.io

Code released under MIT License.