Home

Maltego Integration

Supported OPSWAT Metadefender Public API Endpoints

Public API v2

The OPSWAT Metadefender Public API v2 Retrieving scan reports using data hash endpoint is supported

Public API v3

The OPSWAT Metadefender Public API v3 IP Reputation Service endpoint is supported as it integrates with installed [Maltego] entities.

Rate Limit

The rate limit is supported.

Maltego Configuration

Entities

Custom Entities

The "Link Analysis" cmlh.linkAnalysis hidden entity is added to support the threat et al flags.

Maltego Transform Seed

The Maltego Transform Seed is hosted at https://cetas.paterva.com/TDS/runner/showseed/Metadefender

Maltego Transforms

API v2

All OPSWAT Metadefender Public API v2 endpoints are supported that integrate with [Maltego] entities and includes the following:

1. From "Hash" maltego.Hash To Retrieving scan reports using data hash

API v3

All OPSWAT Metadefender Public API v3 endpoints are supported that integrate with installed [Maltego] entities and includes the following:

1. From "IPv4 Address" maltego.IPAddress To IP Reputation Service with the file_metadata: 1 Request Header

Maltego Entity Bookmark

"OPSWAT Metadefender"

• Green - "Unknown" returned by IP Reputation Service
• Green - "No threat detection or the file is empty." returned by Retrieving scan reports using data hash
• Green - "Not Found" returned by Retrieving scan reports using data hash
• Orange Purple - HTTP Status 429 "Too Many Requests" error returned due to exceeding rate limit