Skip to content

v0.2.0 - Phase B transforms

Choose a tag to compare

@solomonneas solomonneas released this 30 Apr 01:40

Phase B ships a .mtz transform bundle with six right-click pivots in Maltego Desktop:

  • MISP - events containing IOC
  • MISP - attributes in event
  • TheHive - cases containing observable
  • TheHive - observables in case
  • Cortex - analyze IOC
  • ATT&CK - related techniques and tactics

Install

See transforms/README.md for full setup. Quick version:

git clone git@github.com:solomonneas/maltego-mcp.git
cd maltego-mcp
npm run setup:transforms
npm run build:mtz
# Then in Maltego: Import -> Configuration -> dist/maltego-mcp-transforms.mtz

About the attached .mtz

The bundled maltego-mcp-transforms.mtz here is for reference. It hardcodes the absolute path of the venv on the build machine, so other users must rebuild locally with npm run build:mtz after cloning. The XML inside is identical regardless of build machine; only the absolute path differs.

Compatibility

Phase A (TypeScript MCP server, v0.1.x) is unchanged. Either layer can be installed or uninstalled independently. Tested on Maltego Graph (Desktop) Basic 4.11.2.