Visual intelligence graphs: start with a name or domain and watch emails, infrastructure, breaches and relationships connect themselves into a map.
Follow the steps — click any step card to replay the terminal demo from that point. Everything runs in a lab you control.
Every investigation starts as a dot.
Transforms query public sources for relationships.
Email ↔ breach ↔ platform = social engineering map.
See the whole server neighborhood in one view.
OSINT without pictures rarely convinces; Maltego IS the picture.
| Transforms | data expansions |
| Machines | chained transform runs |
| CaseFile | theory bubbles on graph |
| Hub items | Shodan/VT/etc plugins |
| Export | report views |
Slow, deliberate transforms beat 'run everything' — you'll drown in noise.
Map your OWN org/handles: attackers do it to you, see it first.
CaseFile entities let you pin hypotheses right on the graph.
theHarvester + Maltego = free powerhouse recon.
Use Maltego CE only on systems you own or have written permission to test. Your lab: Kali + Metasploitable2, DVWA, TryHackMe & HackTheBox — plenty of legal targets, zero risk.