Phase B ships a .mtz transform bundle with six right-click pivots in Maltego Desktop:
- MISP - events containing IOC
- MISP - attributes in event
- TheHive - cases containing observable
- TheHive - observables in case
- Cortex - analyze IOC
- ATT&CK - related techniques and tactics
Install
See transforms/README.md for full setup. Quick version:
git clone git@github.com:solomonneas/maltego-mcp.git
cd maltego-mcp
npm run setup:transforms
npm run build:mtz
# Then in Maltego: Import -> Configuration -> dist/maltego-mcp-transforms.mtz
About the attached .mtz
The bundled maltego-mcp-transforms.mtz here is for reference. It hardcodes the absolute path of the venv on the build machine, so other users must rebuild locally with npm run build:mtz after cloning. The XML inside is identical regardless of build machine; only the absolute path differs.
Compatibility
Phase A (TypeScript MCP server, v0.1.x) is unchanged. Either layer can be installed or uninstalled independently. Tested on Maltego Graph (Desktop) Basic 4.11.2.