next »

[Maltego Forum]

Maltego Forum » Development » General
Relationships between newly created entities

[natron]

Is it possible to show relationships between multiple entities returned in one transform?

For example, I would like to write a local tranform for nmap that parses out the --traceroute option to create a map of your network.  If possibly, it would draw the links between hops in a route, so that you don''t have direct 1-to-1 links between the input entity and target entity, but rather chains from the beginning to the end.

Is this possible with the current transform spec, or is it not possible to draw links like this?  (I''ve only always seen the hub-and-spoke types of transforms.)

Perhaps a ''helper'' local transform could be made that is just fed the info of a the link, then updates the mapping with it?  Any ideas?

[AndrewMacPherson]

Hi Natron,

Unfortunately due to the way the application has been written and the way we have developed the architecture that is not possible.

One way that i can think of doing this is by simply parsing the output of the traceroute into a flat file or db and then producing the first node and then being able to extend one node further on that. Other than that if you are doing it internally why not extend all the nodes to show the internal mapping since its possible you would use all of them and are not that concerned about the relationships between them

With regards to the "helper" local transform, if you can give me some more info about what you want i am sure i can create something for you to get an idea from.

-AM

[RT]

A transform only shows one relationship...not relationships between created entities. As such - consider *small* transforms, but *many* transforms. Let''s say you have entity A and it creates entities x,y and z. If you want to show that x and z is related, build a transform that works on entities x,y and z and let them return entities of type x,y,z. Then you''ll see the relationships between them.

Remember, a transform *transforms* one entity to another entity - that''s all. So again - less complex transforms, but lots of them that work on lots of entity types.

Hope this helps,
RT