search

MaltegoTech / maltego-trx

Maltego Transform library for Python
MIT License
225 stars 47 forks source link

Connecting NewEntities with NewEntities #4

Closed ytisf closed 4 years ago

ytisf commented 4 years ago

Could not find a way to establish a nested connection. For example, a transform yields a 'Document' entity can be linked to original object. However, it would be excellent to be able to correlate another entity to the Document object rather the original request element.

For example, Hash --> Document -->DomainInDocument. Right now it is only possible to connect both the Document object and the Domain to the original Hash object.

paul-rchds commented 4 years ago

Unfortunately, you are right, it is not possible to return nested entities from a transform as the Maltego client does not support it. A workaround would be to have two transforms: Hash --> Document and another that does Document -->DomainInDocument

ytisf commented 4 years ago

Is this a limitation within Maltego or the TRX library?

paul-rchds commented 4 years ago

It is a limitation with Maltego.

phdowling commented 4 years ago

To add to this: what you might do in this scenario is to create a second transform that links the "document in document" to the intermediate entity. If you then want to automatically run both Transforms, you can create a Machine in your Maltego client

phdowling commented 4 years ago

Closing, as this is not an issue with the maltego-trx library.