Smart Filtering in Transforms
cancel
Showing results for 
Search instead for 
Did you mean: 
L3 Networker
Did you find this article helpful? Yes No
No ratings

What it is Smart Filtering

 

When using Maltego, it's a delicate balance of getting to the information you need and not cluttering the graph. A cluttered graph leads to confusion and can easily lead users to pivot on entities which simply aren't interesting. The data in AutoFocus is rich, but contains a lot of data which relates to the general operation of Windows, and other unwanted data. To help address this problem our transforms use a filtering system to attempt to alleviate these issues.

 

How it works

Before entities are returned by our transforms they are checked against various lists of known entities which users are unlikely to want. These include domain names such as 'time.windows.com', parking IP address ranges, Dynamic DNS root domains, and much more. 

 

Whenever entities are filtered, users can see that this has happened by looking at the "Transform Output" window:

 

Transform Output Example.JPG

 

You can see the filtering in action in the video below:

 

 

If you believe an entity is being wrongly filtered, please file a bug report in the Forum.

 

The Future of Transforms

In future releases of our transforms, we will enable users to turn off Smart Filtering, but for the first release this feature will be mandatory.

Rate this article:
Register or Sign-in
Article Dashboard
Version history
Last update:
‎10-24-2019 08:40 AM
Updated by:
Retired Member
Contributors