A set of Maltego transforms for Virustotal Public API v2.0.
This set has the added functionality of caching VT queries on a daily basis so to speed up resolutions in Maltego.
File (below functions are merged into one transform to enrich a given SHA256):
= Requirement =
- VirusTotal Public API key
= Installation (using the Maltego configuration file) =
- Place content from this reposition in the path C:/Maltego Transforms/MaltegoVTPublic/ (please also see Note 2 below)
- Open Maltego and import the configuration file named "MaltegoVTPub.mtz"
- Place your VirusTotal API key in vt_util.py
Note 1: the file named 'gc' is a file "mutex" used to keep track of daily garbage collection on cached queries.
Note 2: the provided Maltego configuration file assumes Windows as the underlying operating system. For Linux, simply go to "Manage transforms" in Maltego and change to Linux path notations for the transforms to work.
If you have any problems, message me on Twitter: https://twitter.com/michael_yip :-)