Welcome to the Certified OSSEC User program! This certification is designed for security professionals, system administrators, and SOC analysts who want to master OSSEC, the industry-leading open-source Host-based Intrusion Detection System (HIDS).
OSSEC provides a powerful and flexible solution for security monitoring, log analysis, file integrity checking, rootkit detection, and active response. This course will take you from the fundamentals of OSSEC architecture to advanced deployment, customization, and integration with enterprise security operations.
The program is structured into 7 comprehensive modules, combining theoretical foundations with extensive hands-on labs, practical exercises, and real-world case studies to ensure you are fully prepared for the certification exam.
| Detail | Information |
|---|---|
| Program Title | Certified OSSEC User |
| Target Audience | Security Analysts, System Administrators, SOC Engineers, Cybersecurity Professionals, and IT Auditors |
| Prerequisites | Basic understanding of Linux system administration, networking concepts, and security fundamentals |
| Duration | Flexible – typically 2–4 weeks (depending on pace) |
| Format | Online / In-person / Blended with hands-on labs |
| Certification | Official certification upon successful completion of the final exam and practical assessment |
Why become a Certified OSSEC User?
The program consists of 7 core modules, each building on the previous one. The course culminates in a capstone project and a certification exam that tests both theoretical knowledge and practical skills.
Overview: This module provides a comprehensive introduction to OSSEC, its core concepts, and its role in host-based intrusion detection. You will learn about the architecture, components, and key features that make OSSEC a critical tool for security monitoring .
Learning Outcomes:
Overview: This module provides hands-on training in installing and configuring OSSEC, including server and agent setup, central management, and the web UI .
ossec.conf file.Learning Outcomes:
Overview: This module focuses on log analysis, rule creation, and alerting, the core detection capabilities of OSSEC .
Learning Outcomes:
Overview: This module covers File Integrity Monitoring (FIM), a key feature of OSSEC used for compliance and real-time malware detection .
Learning Outcomes:
Overview: This module covers advanced deployment scenarios, performance optimization, and integration with other security tools such as SIEM and ELK Stack .
Learning Outcomes:
Overview: This module focuses on troubleshooting, maintenance, and proactive security measures to ensure the reliability and effectiveness of OSSEC deployments .
Learning Outcomes:
Overview: This module consolidates all the skills learned through a comprehensive capstone project and prepares learners for the certification exam .
Learning Outcomes:
Assessment Methods:
Certification:
| Term | Definition |
|---|---|
| OSSEC | Open-source Host-based Intrusion Detection System (HIDS) . |
| HIDS | Host-based Intrusion Detection System – monitors activity on a single host . |
| FIM | File Integrity Monitoring – tracks changes to files and directories . |
| Agent | Software component installed on monitored systems . |
| Server | Central OSSEC component that collects and processes data from agents . |
| Active Response | Automatic actions taken in response to detected threats . |
| Rule | Definition of a detection pattern in OSSEC . |
| Log Analysis | Process of examining logs to detect security events . |
| Rootkit Detection | Identifying hidden malware on a system . |
| SIEM | Security Information and Event Management – platform for security monitoring . |
ossec.conf file.This course is designed for both beginners and experienced security professionals. Use a combination of live demonstrations, hands-on labs, and case studies to ensure practical learning . Emphasize the importance of real-time monitoring and active response . The capstone project should be a significant deployment that allows students to showcase their full range of skills .
If you are supporting a learner in this program, encourage them to think about how security monitoring protects systems. Discuss the importance of log analysis and incident response. Celebrate their achievements as they build new cybersecurity skills.
+------------------+ +------------------+
| OSSEC Server | | OSSEC Agents |
+------------------+ +------------------+
| - Log collection| | - Log monitoring|
| - Rule engine | | - FIM |
| - Alerting | | - Active Response|
+------------------+ +------------------+
| |
+------------------------------+
|
v
+------------------+
| Dashboard |
| (ELK/SIEM) |
+------------------+
| Feature | Description | Use Case |
|---|---|---|
| Log Analysis | Collects and analyzes logs | Threat detection |
| FIM | Tracks file changes | Compliance and malware detection |
| Rootkit Detection | Detects hidden malware | System integrity |
| Active Response | Automates threat response | Incident mitigation |
+----------+ +----------+ +----------+
| Install | -------> | Configure| -------> | Deploy |
| Server | | Agents | | Agents |
+----------+ +----------+ +----------+
|
v
+----------+ +----------+ +----------+
| Monitor | <------- | Integrate| <------- | Configure|
| Logs | | Dashboard| | Rules |
+----------+ +----------+ +----------+
The Certified OSSEC User program provides a comprehensive pathway to mastering this essential open-source HIDS. You will gain deep expertise in installing, configuring, managing, and integrating OSSEC into enterprise security operations .
This certification will empower you to detect and respond to intrusions, meet compliance requirements, and enhance your organization's security posture .
Take the next step in your cybersecurity career – become a Certified OSSEC User!
Before starting the Certified OSSEC User program, we recommend:
The world of security monitoring is waiting for you – take the next step!
Hello, future investigator! Welcome to the first module of your journey to become a Certified Maltego User. Have you ever wondered how detectives connect clues to solve mysteries? Or how investigators find information about people and things online? That's what this course is all about!
In this module, we will learn what OSINT (Open Source Intelligence) is and how a powerful tool called Maltego helps us see connections between information that might not be obvious at first. It's like being a detective who has a magic map that shows how all the clues are linked together.
We will use simple stories and examples so that even a 10-year-old can understand. By the end, you will see that information is like a puzzle, and Maltego is the tool that helps you put the pieces together.
Let's begin our adventure with a fun story!
After this module, you will be able to:
Amina lost her phone. She was very sad because it had all her photos and messages. Her friend, a security analyst, said: "Don't worry, we can use OSINT to find clues."
Amina didn't know what OSINT was. Her friend explained: "OSINT is like being a detective who uses information that everyone can see – like social media, websites, and public records – to find answers."
They started by looking at the last place Amina used her phone. Then they looked at her social media – maybe she posted a picture from somewhere. They found a photo she took at the market. They saw a shop sign in the background. They searched for that shop and found it was near a friend's house.
They called the friend, and the friend said: "I found Amina's phone! She left it at my house."
Amina was amazed. Her friend said: "That's OSINT! We used public information to solve a problem. Now imagine having a tool that does this automatically, showing you connections like a spiderweb. That's Maltego."
Now, let's learn more about this amazing tool!
Definition: OSINT stands for Open Source Intelligence. It means gathering information from public, open sources – like the internet, news, social media, and public records.
Why is it important? OSINT helps us find information that is available to everyone, but sometimes hidden in plain sight.
Simple explanation: OSINT is like being a detective who reads books, watches the news, and looks at social media to solve a mystery.
Real‑life example: A journalist uses OSINT to find information about a news story.
School example: Your teacher uses OSINT to find information for a lesson online.
Home example: You use OSINT to find a recipe on the internet.
Nigerian example: A researcher uses OSINT to find data about the Nigerian economy.
Illustration:
+---------------------+
| OSINT |
+---------------------+
| - Social Media |
| - Websites |
| - News |
| - Public Records |
+---------------------+
Mini summary: OSINT is gathering information from public sources.
Definition: Data is raw facts. Information is data that has meaning. Intelligence is information that helps you make a decision.
Why is it important? Understanding the difference helps us know how to use what we find.
Simple explanation: Data is like flour; information is like dough; intelligence is like a baked cake.
Real‑life example: A phone number is data; knowing who owns it is information; using it to catch a criminal is intelligence.
School example: A list of numbers is data; calculating the average is information; deciding to study harder is intelligence.
Home example: A shopping list is data; knowing you need bread is information; going to the store is intelligence.
Nigerian example: Transaction records are data; finding a pattern is information; stopping fraud is intelligence.
Illustration:
Data: "0812345678"
Information: "This number belongs to someone."
Intelligence: "This number was used in a crime."
Mini summary: Data is raw; information is meaningful; intelligence helps you act.
Definition: Maltego is a computer program that helps you find connections between different pieces of information. It turns data into a visual map (a graph) that shows how things are linked.
Why is it important? Maltego helps investigators see the "big picture" – connections that are hard to see with just text.
Simple explanation: Maltego is like a magic map that shows you all the hidden connections between people, websites, and other clues.
Real‑life example: A police detective uses Maltego to see how a group of criminals are connected.
School example: You use a diagram to show how different topics are related – Maltego does that with data.
Home example: You draw a family tree – Maltego draws a "data tree" showing connections.
Nigerian example: A cybersecurity analyst in Lagos uses Maltego to track online fraud.
Illustration:
+---------------------------------------+
| Maltego |
+---------------------------------------+
| Takes data → Finds connections → |
| Shows them as a visual map (graph) |
+---------------------------------------+
Mini summary: Maltego is a tool that visualizes connections between data.
Definition: An entity is a piece of information in Maltego – like a person, a website, or a phone number. They are the dots on your map.
Why is it important? Entities are the starting points of your investigation. You put them in Maltego and then look for connections.
Simple explanation: Entities are like the characters in a story. You start with one character and find out how they are connected to others.
Real‑life example: A "Person" entity could be a suspect. A "Domain" entity could be a suspicious website.
School example: In a school investigation, entities could be "Students," "Teachers," and "Classes."
Home example: In a family tree, entities are family members.
Nigerian example: In a fraud investigation, entities could be "Bank Accounts," "Phone Numbers," and "Addresses."
Illustration:
Types of Entities:
+----------+ +----------+ +----------+
| Person | | Domain | | Phone |
+----------+ +----------+ +----------+
| Email | | URL | | IP |
+----------+ +----------+ +----------+
Mini summary: Entities are the pieces of data you start with in Maltego.
Definition: A transform is a tool in Maltego that takes an entity and finds new information related to it. It's like asking a question and getting an answer.
Why is it important? Transforms are how Maltego builds your map – they find the connections.
Simple explanation: A transform is like a magic wand – you wave it over a clue, and it brings you more clues.
Real‑life example: You have a person's name. A transform can find their social media profiles, email addresses, and websites they own.
School example: You have a student's name. A transform can find their grades, classes, and teachers.
Home example: You have a recipe name. A transform can find ingredients, cooking time, and similar recipes.
Nigerian example: You have a phone number. A transform can find the owner, their address, and their social media.
Illustration:
+----------+ +----------+
| Entity | -------> | Transform| -------> | New Data |
+----------+ +----------+ +----------+
| Person | | Ask "Who | | Email |
| | | is this?"| | Phone |
+----------+ +----------+ +----------+
Mini summary: Transforms find new data related to an entity.
Definition: A graph is a visual map in Maltego that shows entities (dots) and the connections (lines) between them.
Why is it important? Graphs help you see patterns and relationships that are hard to see in a list.
Simple explanation: A graph is like a map of a city – the dots are places, and the lines are the roads connecting them.
Real‑life example: A graph shows how a group of people are connected through email, phone calls, and websites.
School example: A graph shows how students in a class are connected by friendship or group projects.
Home example: A graph shows how your family members are connected.
Nigerian example: A graph shows how fraudsters are connected through bank accounts and addresses.
Illustration:
+----------+ +----------+
| Person |----------| Email |
+----------+ +----------+
| |
| |
+----------+ +----------+
| Phone |----------| Website |
+----------+ +----------+
Mini summary: A graph is a visual map showing connections between entities.
Definition: Link analysis is the process of finding and understanding connections between different pieces of information.
Why is it important? It helps investigators find hidden relationships and patterns.
Simple explanation: Link analysis is like playing "connect the dots" – you find the dots and then draw lines to see the picture.
Real‑life example: A detective uses link analysis to see how a group of criminals are connected.
School example: You use link analysis to see how different topics in a subject are related.
Home example: You use link analysis to see how your friends are connected to each other.
Nigerian example: A security analyst uses link analysis to track online fraud networks.
Illustration:
+----------+ +----------+
| Clue A |----------| Clue B |
+----------+ +----------+
| |
| |
+----------+ +----------+
| Clue C |----------| Clue D |
+----------+ +----------+
Mini summary: Link analysis finds and visualizes connections between data points.
Definition: Maltego is a super tool because it does all the hard work of finding connections automatically. It saves time and helps you see the big picture.
Why is it important? Without Maltego, investigators would have to search manually through millions of pieces of data.
Simple explanation: Maltego is like a super-smart assistant that does the boring detective work for you.
Real‑life example: A company uses Maltego to find all the websites owned by a competitor.
School example: A student uses Maltego to find all the books written by a specific author.
Home example: You use Maltego to find all the recipes that use a specific ingredient.
Nigerian example: A Nigerian bank uses Maltego to track online fraud networks.
Illustration:
Without Maltego: Manual search → Takes days
With Maltego: Click a button → Gets results in seconds
Mini summary: Maltego automates the search for connections, saving time and effort.
Definition: The Maltego screen is where you do your investigation. It has three main parts: the Graph view (the map), the Palette (your toolbox), and the Detail view (information about what you select).
Why is it important? Knowing where everything is helps you use Maltego faster and better.
Simple explanation: The Maltego screen is like your detective desk – everything is organised so you can work efficiently.
Real‑life example: The Graph view shows your investigation map; the Palette has your tools (transforms); the Detail view shows more information about a clue.
School example: The Graph view is your whiteboard; the Palette is your markers and erasers; the Detail view is your notes.
Home example: The Graph view is your family tree poster; the Palette is your pens; the Detail view is the family photo album.
Nigerian example: A detective's case board – the Graph view is the board with photos and strings; the Palette is the pins and markers; the Detail view is the case file.
Illustration:
+---------------------------------------+
| Maltego Screen |
+---------------------------------------+
| +--------------------------------+ |
| | Graph View (Map) | |
| | (Shows entities & connections)| |
| +--------------------------------+ |
| +------------+ +-----------------+ |
| | Palette | | Detail View | |
| | (Tools) | | (Information) | |
| +------------+ +-----------------+ |
+---------------------------------------+
Mini summary: The Maltego screen has three main parts: Graph, Palette, and Detail view.
Definition: Getting started means installing Maltego, creating an account, and learning the basic steps to start an investigation.
Why is it important? You need to set up your tools before you can start investigating.
Simple explanation: Getting started is like sharpening your pencils before you start drawing.
Real‑life example: You install Maltego on your computer, create an account, and then you can begin.
School example: You open your notebook, write your name, and then start your homework.
Home example: You set up your game console, create a profile, and then start playing.
Nigerian example: A Nigerian investigator installs Maltego and creates an account to start an investigation.
Illustration:
Steps:
1. Install Maltego
2. Create an account
3. Open a new graph
4. Add an entity
5. Run a transform
Mini summary: Getting started with Maltego involves installation, account creation, and learning basic steps.
Definition: Many professionals use Maltego – from police detectives to cybersecurity experts to journalists.
Why is it important? Knowing who uses Maltego helps you understand how powerful it is.
Simple explanation: Maltego is used by smart people who need to find hidden connections in the real world.
Real‑life example: A police detective uses Maltego to find links between crime scenes.
School example: A school principal uses Maltego to find links between student incidents.
Home example: A parent uses Maltego to find out if their child is safe online.
Nigerian example: A Nigerian security agency uses Maltego to track cybercrime.
Illustration:
People who use Maltego:
- Police detectives
- Cybersecurity experts
- Journalists
- Corporate investigators
- Threat intelligence analysts
Mini summary: Maltego is used by many professionals to solve real-world problems.
Definition: OSINT information is everywhere – on social media, websites, news, and public records. We just need to know how to find it and use it.
Why is it important? OSINT is a powerful tool for understanding the world around us.
Simple explanation: OSINT is like a giant library where anyone can read the books. We just need to know which books to read.
Real‑life example: You can find out about a company by looking at their website and news articles.
School example: You can find information about a historical event by reading online articles.
Home example: You can find a recipe by searching online.
Nigerian example: You can find information about the Nigerian economy by reading news and reports.
Illustration:
Sources of OSINT:
+----------+ +----------+ +----------+
| Social | | News | | Public |
| Media | | Websites | | Records |
+----------+ +----------+ +----------+
Mini summary: OSINT is everywhere – we just need to know how to use it.
Definition: Ethics means doing the right thing. When using OSINT and Maltego, we must always respect people's privacy and follow the law.
Why is it important? Using information responsibly is important to protect ourselves and others.
Simple explanation: Being ethical is like being a good detective – you don't spy on people or use information to hurt them.
Real‑life example: A journalist uses OSINT to find information for a story but protects the identity of innocent people.
School example: A student uses online information for a project but gives credit to the sources.
Home example: You look up information about a topic but don't share personal details of others.
Nigerian example: A Nigerian investigator uses OSINT to track fraud but follows the law and protects privacy.
Illustration:
Ethical Guidelines:
- Respect privacy
- Follow the law
- Use information responsibly
- Don't harm others
Mini summary: Always use OSINT and Maltego ethically and legally.
Definition: Visualization means turning data into pictures – like graphs and charts. Maltego visualizes connections so we can see patterns more easily.
Why is it important? Our brains process pictures faster than words. Visualization helps us understand complex data quickly.
Simple explanation: Visualization is like drawing a map of a city instead of just reading a list of street names.
Real‑life example: A weather forecast uses a map to show where it will rain.
School example: A teacher uses a diagram to explain how a machine works.
Home example: You draw a map to show your friend how to get to your house.
Nigerian example: A security analyst uses a Maltego graph to show how fraudsters are connected.
Illustration:
Text: "A is connected to B. B is connected to C. A is also connected to C."
Visualization:
+----------+
| A |
+----------+
/ \
/ \
v v
+----------+ +----------+
| B |--| C |
+----------+ +----------+
Mini summary: Visualization helps us see connections and patterns more easily.
Definition: In this module, we learned what OSINT is, what Maltego does, and how it helps us find connections.
Why is it important? This is the foundation of becoming a Certified Maltego User.
Simple explanation: You have learned the basic building blocks – now you are ready to start building your investigation skills.
Real‑life example: You have learned how to use a map – now you are ready to go on an adventure.
School example: You have learned the alphabet – now you are ready to read books.
Home example: You have learned how to cook a basic dish – now you are ready to try new recipes.
Nigerian example: You have learned the basics of OSINT – now you are ready to help fight cybercrime in Nigeria.
Illustration:
+---------------------------------------+
| Module 1 Summary |
+---------------------------------------+
| - What is OSINT? |
| - What is Maltego? |
| - Entities, Transforms, Graphs |
| - Link analysis |
| - Staying ethical |
+---------------------------------------+
Mini summary: You have learned the foundation – now you are ready to dive deeper into Maltego!
| Word | Simple Definition |
|---|---|
| OSINT | Open Source Intelligence – gathering information from public sources. |
| Maltego | A tool that finds and visualizes connections between data. |
| Entity | A piece of data in Maltego – like a person or a website. |
| Transform | A tool in Maltego that finds new information related to an entity. |
| Graph | A visual map showing entities and the connections between them. |
| Link Analysis | Finding and understanding connections between data points. |
| Intelligence | Information that helps you make a decision or take action. |
| Visualization | Turning data into pictures, like graphs and charts. |
| Ethics | Doing the right thing – respecting privacy and following the law. |
| Investigation | A systematic search for information to solve a problem. |
This module is an introduction to OSINT and Maltego. Use plenty of real-world examples and analogies to make the concepts relatable. Encourage students to think about how information is connected in their daily lives. The goal is to build curiosity and a foundational understanding. Ask questions like "Where does this information come from?" and "How could these things be connected?"
Encourage your child to think about how information is connected – in their school, their community, and online. Discuss the importance of using information responsibly and respecting privacy. Celebrate their curiosity and encourage them to ask questions.
| Source | Example |
|---|---|
| Social Media | Facebook, Twitter, Instagram |
| Websites | News, Company, Personal |
| Public Records | Government databases, Court records |
| News | Newspapers, Online news |
+----------+ +----------+ +----------+
| Start | -------> | Add | -------> | Run |
| Entity | | to Graph | | Transforms|
+----------+ +----------+ +----------+
|
v
+----------+ +----------+ +----------+
| Analyze | <------- | Repeat | <------- | Get |
| Results | | as Needed| | New Data |
+----------+ +----------+ +----------+
+----------+ +----------+
| Person |----------| Email |
+----------+ +----------+
| |
| |
+----------+ +----------+
| Phone |----------| Website |
+----------+ +----------+
You have completed Module 1 – "Welcome to the World of OSINT & Maltego"! You have learned what OSINT is, what Maltego does, and how they help us find hidden connections.
You discovered that information is like a puzzle, and Maltego is the tool that helps you put the pieces together. You also learned about entities, transforms, graphs, and the importance of using these tools ethically.
This is the start of your journey to becoming a Certified Maltego User!
Well done – you are now ready for Module 2!
| Term | Definition |
|---|---|
| 1. OSINT | A. A visual map showing connections |
| 2. Maltego | B. A piece of data |
| 3. Entity | C. Gathering information from public sources |
| 4. Transform | D. A tool for visualizing connections |
| 5. Graph | E. A tool that finds new information |
Answers: 1‑C, 2‑D, 3‑B, 4‑E, 5‑A
Scenario 1: Amina lost her phone. How can OSINT help her find it? What sources of information could she use?
Scenario 2: A Nigerian company suspects that someone is trying to impersonate their CEO online. How can Maltego be used to find the impersonator?
In groups, choose a mystery – e.g., "Who stole the school's cookies?" Brainstorm what information (clues) you would need to solve it. Identify what is data, what is information, and what would be intelligence. Present your findings to the class.
Think about a mystery or problem you have faced. Write down 5 pieces of data, 3 pieces of information, and 1 piece of intelligence that could help solve the problem.
Build a Simple Link Map: Choose a topic – e.g., "My favourite celebrities." Draw a map (graph) showing how they are connected – who knows who, who follows who, etc. This is what Maltego does on a much larger scale!
Write a short report on how OSINT is used in Nigeria. Include examples of how investigators, journalists, or companies use OSINT. Explain why OSINT is important for the country.
Think about a real-world problem in Nigeria – e.g., cybercrime, misinformation, or fraud. How could OSINT and Maltego be used to address this problem? Write a short proposal.
Fill‑in‑the‑Blank: 1. OSINT, 2. information, intelligence, 3. entity, 4. transform, 5. graph, 6. Link analysis, 7. Ethics, 8. Palette, 9. Maltego, 10. verify.
True/False: 1F, 2T, 3T, 4F, 5T, 6F, 7F, 8F, 9T, 10T.
Multiple Choice: 1B, 2B, 3B, 4A, 5B, 6A, 7A, 8A, 9D, 10A, 11B, 12B, 13A, 14C, 15B.
In Module 2, you will learn how to use Maltego hands-on! You will create your first graph, add entities, run transforms, and start discovering connections. To prepare, make sure you have Maltego CE installed on your computer.
Great work, future investigator! See you in Module 2!
Hello, future investigator! In Module 1, you learned what OSINT is and what Maltego does. You discovered that Maltego is like a magic map that shows connections between clues. Now, it's time to get your hands on the tool and start using it!
In this module, you will learn how to install Maltego, create your first account, and build your very first graph. You will add entities (clues), run transforms (the magic wand), and see the connections appear right before your eyes.
Think of this as learning to use a new detective tool – you will see how easy it is to start uncovering hidden connections.
Let's begin with a story that shows how we can use Maltego to solve a problem!
After this module, you will be able to:
Chidi loved playing online games. One day, he got a message from a player who said they knew him. They knew his school, his favorite food, and even his pet's name. Chidi was scared – how did this stranger know so much about him?
His older sister, who was learning to be a cybersecurity investigator, said: "Don't worry, Chidi. Let's use Maltego to find out who this person is."
She installed Maltego on her computer. She created a new graph and added the stranger's username as an entity. Then she ran a transform – like a magic spell – that searched for other accounts using the same username.
Soon, a graph appeared. It showed other social media accounts, emails, and even a website linked to that username. They found a profile picture and recognized it – it was a boy from Chidi's school!
Chidi learned that Maltego could help find connections and solve mysteries. He was amazed and excited to learn more!
Now, let's learn how to use this powerful tool!
Definition: Installation is the process of putting Maltego on your computer so you can use it.
Why is it important? You can't use Maltego without installing it first – it's like buying a new game and putting it into your console.
Simple explanation: Installing Maltego is like getting a new app on your phone. You download it, follow the instructions, and then it's ready to use.
Real‑life example: You download and install a game on your phone.
School example: Your teacher installs a new program on the school computer.
Home example: You install a new app on your tablet.
Nigerian example: A Nigerian analyst installs Maltego on their laptop to start an investigation.
Illustration:
Steps to Install:
1. Go to the Maltego website.
2. Download the installer (choose your operating system).
3. Run the installer and follow the instructions.
4. Launch Maltego!
Mini summary: Installation is the first step to using Maltego.
Definition: Maltego comes in different versions (editions) – Community Edition (CE) is free, and XL, Enterprise, and others are paid.
Why is it important? Choosing the right version depends on your needs. For learning, the free Community Edition is perfect.
Simple explanation: Maltego editions are like different levels of a game – the free version has basic features, and the paid versions have more advanced tools.
Real‑life example: A beginner uses the free version to learn; a professional uses the paid version for advanced investigations.
School example: You use a free version of a tool for a school project.
Home example: You use a free app to learn a new skill.
Nigerian example: A Nigerian student uses Maltego CE to learn OSINT.
Illustration:
Maltego Editions:
+----------+ +----------+ +----------+
| CE | | XL | | Enterprise|
| (Free) | | (Paid) | | (Paid) |
+----------+ +----------+ +----------+
Mini summary: Maltego CE is the free version – perfect for learning.
Definition: An account is like a login – it gives you access to Maltego and saves your settings.
Why is it important? You need an account to use Maltego. It's like having a username and password for a game.
Simple explanation: Creating an account is like signing up for a new app – you provide your email and choose a password.
Real‑life example: You create an account for a social media app.
School example: You create an account for a school learning portal.
Home example: You create an account for a streaming service.
Nigerian example: A Nigerian investigator creates a Maltego account to start an investigation.
Illustration:
Steps to Create an Account:
1. Go to the Maltego website.
2. Click "Sign Up" or "Create Account".
3. Enter your email and create a password.
4. Verify your email.
5. Log in to Maltego.
Mini summary: You need an account to use Maltego.
Definition: The home screen is the first thing you see when you open Maltego. It has options to start a new investigation, open an existing one, or explore examples.
Why is it important? The home screen is your starting point – it's like the main menu of a game.
Simple explanation: The home screen is where you choose what to do next – start a new case or continue an old one.
Real‑life example: The home screen on your phone shows your apps.
School example: The main page of your school portal.
Home example: The dashboard of your smart TV.
Nigerian example: A Nigerian analyst opens Maltego and sees the home screen.
Illustration:
Maltego Home Screen:
+---------------------------------------+
| +--------------------------------+ |
| | New Graph (Start a new case) | |
| +--------------------------------+ |
| +--------------------------------+ |
| | Open Graph (Continue a case) | |
| +--------------------------------+ |
| +--------------------------------+ |
| | Example Graphs (Learn) | |
| +--------------------------------+ |
+---------------------------------------+
Mini summary: The home screen is where you start and open investigations.
Definition: A graph is your investigation map. You create a new graph to start a new case.
Why is it important? Every investigation starts with a new graph – it's like getting a blank map to fill in.
Simple explanation: Creating a new graph is like opening a new notebook to start writing.
Real‑life example: A detective opens a new case file.
School example: You start a new project by opening a new document.
Home example: You start a new shopping list on a blank piece of paper.
Nigerian example: A Nigerian investigator creates a new graph for a fraud case.
Illustration:
Steps:
1. Open Maltego.
2. Click "New Graph".
3. A blank graph appears – ready for clues!
Mini summary: A new graph is a blank map for your investigation.
Definition: An entity is a clue – a piece of data you want to investigate.
Why is it important? You need to add entities to your graph to start finding connections.
Simple explanation: Adding an entity is like putting a pin on a map to mark a location.
Real‑life example: You add a person's name to your investigation.
School example: You add a topic to your research.
Home example: You add an ingredient to your recipe list.
Nigerian example: You add a phone number to a fraud investigation.
Illustration:
Steps:
1. Drag an entity from the Palette (e.g., "Person").
2. Drop it on the graph.
3. Double-click the entity to type the name or data.
Mini summary: Entities are clues you add to your graph.
Definition: A transform is a tool that takes an entity and finds new information related to it.
Why is it important? Transforms are how you discover connections – they are the heart of Maltego.
Simple explanation: A transform is like asking a question – "What else is connected to this clue?"
Real‑life example: You have a person's name. A transform finds their social media profiles.
School example: You have a book title. A transform finds the author and publisher.
Home example: You have a recipe name. A transform finds the ingredients.
Nigerian example: You have a phone number. A transform finds the owner's name.
Illustration:
Steps:
1. Right-click on an entity.
2. Choose a transform from the list (e.g., "To Email Addresses").
3. Wait for the transform to run.
4. New entities will appear on the graph.
Mini summary: Transforms find new information related to an entity.
Definition: In a graph, dots (entities) represent pieces of information, and lines (links) show how they are connected.
Why is it important? The graph helps you see the "big picture" – how all the clues are connected.
Simple explanation: The graph is like a spiderweb – the dots are where the web is attached, and the lines are the threads.
Real‑life example: A detective board with photos and strings connecting them.
School example: A mind map showing how different topics are connected.
Home example: A family tree showing how people are related.
Nigerian example: A graph showing how fraudsters are connected through phone numbers and addresses.
Illustration:
+----------+ +----------+
| Person |----------| Email |
+----------+ +----------+
| |
| |
+----------+ +----------+
| Phone |----------| Website |
+----------+ +----------+
Mini summary: Graphs show entities (dots) and their connections (lines).
Definition: The Palette is the toolbox in Maltego – it contains all the entities and transforms you can use.
Why is it important? The Palette is where you find the tools you need for your investigation.
Simple explanation: The Palette is like a tool belt – it has all the tools you need to build your graph.
Real‑life example: A detective's kit with tools like magnifying glass and fingerprint powder.
School example: Your pencil case with pens, pencils, and erasers.
Home example: A kitchen drawer with different utensils.
Nigerian example: An investigator's toolkit with different software tools.
Illustration:
Palette (Toolbox):
+----------+ +----------+ +----------+
| Entities | | Transforms| | Machines |
| (Clues) | | (Wand) | | (Auto) |
+----------+ +----------+ +----------+
Mini summary: The Palette is your toolbox with entities, transforms, and machines.
Definition: The Detail View shows more information about any entity you select – like its properties and where the data came from.
Why is it important? The Detail View helps you understand your clues better.
Simple explanation: The Detail View is like the back of a book cover – it gives you more information about a clue.
Real‑life example: You click on a photo and see its details – where it was taken and when.
School example: You look at the properties of a file to see its size and type.
Home example: You look at the label on a can to see its ingredients.
Nigerian example: An investigator clicks on a phone number entity to see where the data came from.
Illustration:
Detail View:
+---------------------------------------+
| Entity: Person |
| Name: Chidi Okonkwo |
| Source: Social Media (Facebook) |
| Date: 2024-12-01 |
+---------------------------------------+
Mini summary: The Detail View gives you more information about a selected entity.
Definition: Saving means storing your graph so you can come back to it later.
Why is it important? You don't want to lose your work – saving is like putting your notebook on a shelf.
Simple explanation: Saving is like taking a photo of your graph so you can look at it again later.
Real‑life example: You save a document on your computer.
School example: You save your homework in a folder.
Home example: You save your game progress.
Nigerian example: An investigator saves their graph to continue the investigation later.
Illustration:
Steps to Save:
1. Go to File > Save As.
2. Choose a name for your graph.
3. Click Save.
Mini summary: Saving stores your graph so you can return to it later.
Definition: Exporting means saving your graph in a different format – like an image or a PDF – so you can share it or use it in a report.
Why is it important? Exporting lets you share your findings with others.
Simple explanation: Exporting is like printing a map so you can show it to your friends.
Real‑life example: You export a graph as an image to include in a report.
School example: You export a chart to include in your project presentation.
Home example: You export a photo to share with your family.
Nigerian example: An investigator exports a graph to present to their team.
Illustration:
Export Options:
- Image (PNG, JPG)
- PDF
- CSV (data)
- GraphML (for other tools)
Mini summary: Exporting lets you save your graph in different formats for sharing.
Definition: Example graphs are pre-built investigations that show you how Maltego works. They are like practice cases.
Why is it important? Example graphs help you learn by seeing what a finished investigation looks like.
Simple explanation: Example graphs are like practice exercises – they show you how to use the tool.
Real‑life example: You watch a tutorial video to learn a new skill.
School example: You study sample questions before a test.
Home example: You follow a recipe to learn how to cook.
Nigerian example: A Nigerian student explores example graphs to learn Maltego.
Illustration:
Example Graphs:
+----------+ +----------+ +----------+
| Person | | Company | | Cyber |
| | | | | Threat |
+----------+ +----------+ +----------+
Mini summary: Example graphs are practice cases to help you learn Maltego.
Definition: Some transforms are used very often – like "To Email Addresses" (find emails for a person) and "To Domain" (find websites).
Why is it important? Knowing the most common transforms helps you start your investigations quickly.
Simple explanation: These transforms are like the most-used tools in your detective kit.
Real‑life example: You have a name; you want to find their email – use "To Email Addresses".
School example: You have a topic; you want to find related topics – use a similar transform.
Home example: You have an ingredient; you want to find recipes – use a search transform.
Nigerian example: You have a phone number; you want to find the owner – use a transform.
Illustration:
Common Transforms:
- To Email Addresses
- To Domain
- To Phone Number
- To Social Media Profiles
- To Websites
Mini summary: Some transforms are used very often – learn them first.
Definition: A complete investigation uses all the steps you have learned – creating a graph, adding entities, running transforms, and analysing the results.
Why is it important? This is what real investigators do every day.
Simple explanation: You use all your tools together to solve a mystery.
Real‑life example: An investigator starts with a clue, adds it to the graph, runs transforms, finds new clues, and repeats until they have a complete picture.
School example: You start with a research question, gather information, organise it, and draw conclusions.
Home example: You start with a recipe idea, gather ingredients, follow the steps, and enjoy the meal.
Nigerian example: A Nigerian investigator uses all these steps to solve a fraud case.
Illustration:
Investigation Steps:
+----------+ +----------+ +----------+
| Start | → | Add | → | Run |
| Entity | | Entity | | Transform|
+----------+ +----------+ +----------+
|
v
+----------+ +----------+ +----------+
| Repeat | ← | Analyze | ← | Get New |
| | | Results | | Data |
+----------+ +----------+ +----------+
Mini summary: A complete investigation uses all the tools and steps you have learned.
| Word | Simple Definition |
|---|---|
| Graph | The visual map of your investigation. |
| Palette | The toolbox in Maltego with entities and transforms. |
| Detail View | Shows more information about a selected entity. |
| Installation | The process of putting Maltego on your computer. |
| Account | A login that gives you access to Maltego. |
| Community Edition (CE) | The free version of Maltego. |
| Export | Saving a graph in a different format (like an image). |
| Example Graph | A pre-built investigation for practice. |
| Link | A connection between two entities. |
| Home Screen | The first screen you see when you open Maltego. |
This module is the hands-on introduction to Maltego. Guide students through the installation process step by step. Use screen sharing or videos to demonstrate how to create graphs, add entities, and run transforms. Encourage students to explore example graphs to see what a finished investigation looks like.
Help your child install Maltego on their computer. Guide them through the account creation process. Encourage them to explore example graphs and create their own simple graphs. This is a great opportunity to learn together!
| Step | Action |
|---|---|
| 1 | Go to Maltego website |
| 2 | Download the installer |
| 3 | Run the installer |
| 4 | Follow the instructions |
| 5 | Launch Maltego |
+---------------------------------------+
| Maltego Screen |
+---------------------------------------+
| +--------------------------------+ |
| | Graph View (Main area) | |
| | (Entities and connections) | |
| +--------------------------------+ |
| +------------+ +-----------------+ |
| | Palette | | Detail View | |
| | (Tools) | | (Information) | |
| +------------+ +-----------------+ |
+---------------------------------------+
+----------+ +----------+ +----------+
| Start | -------> | Add | -------> | Run |
| Entity | | to Graph | | Transform|
+----------+ +----------+ +----------+
|
v
+----------+ +----------+ +----------+
| Analyze | <------- | Repeat | <------- | Get |
| Results | | as Needed| | New Data |
+----------+ +----------+ +----------+
You have completed Module 2 – "Getting Started with Maltego – Your First Graph"! You have learned how to install Maltego, create an account, and build your first graph. You can now add entities, run transforms, and explore connections.
This is a huge step – you are now ready to start conducting real investigations with Maltego!
Great work – you are now ready for Module 3!
| Term | Definition |
|---|---|
| 1. Graph | A. The toolbox in Maltego |
| 2. Palette | B. A visual map of your investigation |
| 3. Entity | C. A tool that finds new information |
| 4. Transform | D. A piece of data |
| 5. Detail View | E. Shows more information about an entity |
Answers: 1‑B, 2‑A, 3‑D, 4‑C, 5‑E
Scenario 1: Chidi received a suspicious email. He wants to find out if the email address is connected to any known scams. How would he use Maltego to investigate?
Scenario 2: A Nigerian company wants to investigate a potential business partner. They have the partner's name and website. How can Maltego help them?
In groups, install Maltego CE on one computer and create a simple graph together. Start with a person's name, add it as an entity, run a transform to find emails, and discuss the results.
Install Maltego CE on your own computer. Create a new graph, add a domain (e.g., "google.com") as an entity, run a transform to find its IP address, and export the graph as an image.
Create a Simple Investigation: Choose a person (real or fictional) and use Maltego to create a graph showing their connections – emails, websites, social media profiles, etc. Export the graph and present it to the class.
Write a step-by-step guide on how to install Maltego, create an account, and create a simple graph. Include screenshots (if possible) and explain each step in simple language.
Create a graph that shows the connections between three different social media platforms. Start with a username, run transforms to find related accounts, and create a graph that shows the relationships.
Fill‑in‑the‑Blank: 1. Maltego CE, 2. graph, 3. entity, 4. transform, 5. Palette, 6. Detail View, 7. Exporting, 8. Example, 9. account, 10. installation.
True/False: 1F, 2T, 3T, 4F, 5T, 6F, 7T, 8F, 9T, 10F.
Multiple Choice: 1B, 2B, 3B, 4C, 5B, 6C, 7A, 8A, 9D, 10A, 11A, 12A, 13B, 14A, 15A.
In Module 3, you will learn advanced investigation techniques – including automating investigations with Machines, conducting higher-level footprinting, and using advanced transforms. To prepare, make sure you are comfortable with the basics – creating graphs, adding entities, and running transforms.
Excellent work, future investigator! See you in Module 3!
Hello, future investigator! In Module 2, you learned how to install Maltego, create graphs, add entities, and run basic transforms. You have already started your journey as a Maltego user.
Now, it's time to take your skills to the next level. In this module, you will learn how to automate your investigations using Machines and how to footprint (map) infrastructure. You will also learn about advanced transforms and how to investigate social media and online presence.
Think of this module as learning to use a self-driving car – you still control it, but it does a lot of the work for you!
Let's begin with a story that shows how automation can make investigations faster and more powerful!
After this module, you will be able to:
Aisha worked for a Nigerian bank. One day, she received an alert about a possible cyber attack. A malware file had been detected on one of the bank's computers.
Aisha knew she needed to find out where the malware came from and who was behind it. She started by adding the malware hash (a unique code) to her Maltego graph.
Instead of running transforms one by one, she decided to use a Machine. A Machine is like a recipe – it runs a series of transforms automatically. She chose the "Malware Investigation" Machine and clicked "Run".
Within minutes, the Machine had found:
Aisha was amazed. What would have taken hours was done in minutes. She reported her findings to the security team, and they stopped the attack before it could cause damage.
Now, let's learn how to use Machines and other advanced techniques!
Definition: A Machine is a pre-built sequence of transforms that runs automatically. It's like a recipe that tells Maltego what to do step by step.
Why is it important? Machines save you time – they do the work of many transforms in one go.
Simple explanation: A Machine is like a robot that follows a set of instructions you give it. You press "Go" and it does everything for you.
Real‑life example: A chef uses a recipe to bake a cake – the recipe tells them exactly what to do.
School example: A teacher has a lesson plan that tells them what to teach each day.
Home example: You have a morning routine that tells you what to do – brush teeth, get dressed, eat breakfast.
Nigerian example: A Nigerian investigator uses a Machine to automate a fraud investigation.
Illustration:
+----------+ +----------+ +----------+
| Entity | -------> | Machine | -------> | Results |
+----------+ +----------+ +----------+
| Start | | (Auto) | | New |
| Clue | | Steps | | Clues |
+----------+ +----------+ +----------+
Mini summary: A Machine is an automated sequence of transforms.
Definition: Using a Machine is simple – you select an entity, choose a Machine from the Palette, and click "Run".
Why is it important? Machines make complex investigations easy – even for beginners.
Simple explanation: Using a Machine is like putting bread in a toaster – you press one button and it does the work.
Real‑life example: You use a recipe app – you pick a recipe and it gives you all the instructions.
School example: You use a calculator – you press a button and it does the math.
Home example: You use a microwave – you press a button and it heats your food.
Nigerian example: A Nigerian investigator selects a Machine to investigate a phone number.
Illustration:
Steps:
1. Select an entity in your graph.
2. Go to the Palette and find the Machines section.
3. Choose a Machine (e.g., "Investigate Person").
4. Click "Run".
5. Watch the Machine do the work!
Mini summary: Using a Machine is as simple as selecting an entity and clicking "Run".
Definition: Footprinting is the process of gathering information about a target – like a person, a company, or a website – to understand their digital footprint.
Why is it important? Footprinting helps you understand the "territory" before you dive deeper into an investigation.
Simple explanation: Footprinting is like exploring a new neighborhood – you want to know what's there before you start investigating.
Real‑life example: A detective visits the scene of a crime to understand the area.
School example: A student researches a topic before writing an essay.
Home example: You look at a map before going on a trip.
Nigerian example: An investigator footprints a domain to find out who owns it.
Illustration:
Footprinting:
+----------+ +----------+
| Target | -------> | Footprint|
| | | (Map) |
+----------+ +----------+
| Domain | | IP |
| Person | | Emails |
| Company | | Servers |
+----------+ +----------+
Mini summary: Footprinting is gathering information about a target.
Definition: Higher-level infrastructure footprinting means mapping everything connected to a target – like all the websites, servers, and IP addresses owned by a company.
Why is it important? It gives you a complete picture of a target's online presence.
Simple explanation: If you want to know everything about a building, you look at the whole building – not just one room.
Real‑life example: An investigator maps all the properties owned by a company.
School example: A student maps all the sources used in a research project.
Home example: You map out all the rooms in a new house.
Nigerian example: An investigator maps all the domains owned by a Nigerian company.
Illustration:
Infrastructure Map:
+----------+ +----------+
| Domain |----------| Subdomain|
+----------+ +----------+
| |
| |
+----------+ +----------+
| IP |----------| Server |
+----------+ +----------+
Mini summary: Higher-level footprinting maps all of a target's online assets.
Definition: BuiltWith is a transform that tells you what technologies a website uses – like what programming language, hosting provider, and analytics tools.
Why is it important? Knowing what a website is built with can help you understand its vulnerabilities.
Simple explanation: BuiltWith is like looking under the hood of a car – you see what makes it work.
Real‑life example: A cybersecurity analyst uses BuiltWith to see if a website has vulnerabilities.
School example: A student looks at the tools used to build a website.
Home example: You look at the ingredients of a meal to know how it's made.
Nigerian example: An investigator uses BuiltWith to find out what technology a Nigerian bank website uses.
Illustration:
BuiltWith Results:
+----------+ +----------+
| Website | -------> | BuiltWith|
+----------+ +----------+
| | | Hosting |
| | | CMS |
| | | Analytics|
+----------+ +----------+
Mini summary: BuiltWith tells you what technologies a website uses.
Definition: Dorking is using special search operators (like "site:" or "filetype:") to find specific information on Google. Maltego can automate this process.
Why is it important? Dorking helps you find information that is hidden in plain sight.
Simple explanation: Dorking is like using a magnifying glass to find tiny details on a map.
Real‑life example: A journalist uses dorking to find public documents online.
School example: A student uses dorking to find specific research papers.
Home example: You use dorking to find a specific recipe.
Nigerian example: An investigator uses dorking to find public records in Nigeria.
Illustration:
Dorking Operators:
site:example.com - search only on that site
filetype:pdf - search only PDF files
intitle:"keyword" - search for keyword in titles
Mini summary: Dorking uses special search operators to find specific information.
Definition: Social media investigation means using Maltego to find and connect social media profiles, posts, and relationships.
Why is it important? Social media is a goldmine of information – people share a lot about themselves online.
Simple explanation: Social media investigation is like looking at someone's photo album to learn about their life.
Real‑life example: A detective uses social media to track a suspect's friends.
School example: A student uses social media to research a famous person.
Home example: You look at a friend's social media to see what they've been doing.
Nigerian example: An investigator uses social media to find connections between suspects.
Illustration:
Social Media Graph:
+----------+ +----------+
| Person |----------| Facebook |
+----------+ +----------+
| |
| |
+----------+ +----------+
| Twitter |----------| Instagram|
+----------+ +----------+
Mini summary: Social media investigation finds and connects online profiles.
Definition: Maltego has special transforms for social media – like Pipl (finds people), Epieos (finds accounts), and Hunter (finds emails).
Why is it important? These tools make social media investigation faster and more accurate.
Simple explanation: These transforms are like special tools in your detective kit – each one does a specific job.
Real‑life example: A company uses Hunter to find employee email addresses.
School example: A student uses Pipl to find a person's online presence.
Home example: You use Epieos to find if someone has a social media account.
Nigerian example: An investigator uses Hunter to find email addresses for a Nigerian company.
Illustration:
Social Media Tools:
+----------+ +----------+ +----------+
| Pipl | | Epieos | | Hunter |
+----------+ +----------+ +----------+
| Finds | | Finds | | Finds |
| People | | Accounts | | Emails |
+----------+ +----------+ +----------+
Mini summary: Social media transforms help you find people, accounts, and emails.
Definition: A malware hash is a unique code that identifies a specific piece of malware. Maltego can use it to find information about the malware – like its name, type, and origins.
Why is it important? Investigating a hash can help you understand a cyber attack and find the threat actor.
Simple explanation: A hash is like a fingerprint for a file – it's unique to that file.
Real‑life example: A cybersecurity analyst uses a hash to identify a new virus.
School example: A student uses a code to identify a specific book.
Home example: You use a serial number to identify a device.
Nigerian example: An investigator uses a hash to track a malware attack on a Nigerian bank.
Illustration:
Malware Hash Investigation:
+----------+ +----------+
| Hash | -------> | Virus |
+----------+ +----------+
| | | Name |
| | | Type |
| | | Origin |
+----------+ +----------+
Mini summary: A malware hash is a unique fingerprint used to identify malware.
Definition: Cyber threat intelligence is information about threats – like who is attacking, how they attack, and what they are after.
Why is it important? It helps you defend against attacks by understanding your enemy.
Simple explanation: Threat intelligence is like knowing a thief's habits – it helps you protect your house.
Real‑life example: A security team uses threat intelligence to stop attacks.
School example: A teacher uses intelligence to know which students need extra help.
Home example: You use intelligence to know when to lock your doors.
Nigerian example: A Nigerian security team uses threat intelligence to protect a bank.
Illustration:
Threat Intelligence:
+----------+ +----------+
| Threat | -------> | Intelligence|
+----------+ +----------+
| Attack | | Who |
| Malware | | How |
| Actor | | Why |
+----------+ +----------+
Mini summary: Cyber threat intelligence helps you understand and defend against attacks.
Definition: Here are some common Machines you can use:
Why is it important? Knowing which Machine to use saves you time.
Simple explanation: Machines are like different tools for different jobs – you choose the right one for the job.
Real‑life example: A detective uses the right tool for the right case.
School example: A student uses the right book for the right subject.
Home example: You use the right kitchen tool for the right dish.
Nigerian example: An investigator chooses the right Machine for a fraud case.
Illustration:
Machines Examples:
+----------+ +----------+ +----------+
| Person | | Domain | | Malware |
| Machine | | Machine | | Machine |
+----------+ +----------+ +----------+
Mini summary: Different Machines are used for different types of investigations.
Definition: A complete investigation uses all the tools you have learned – Machines, transforms, footprinting, and social media investigation.
Why is it important? This is what real investigations look like – you use everything to find the truth.
Simple explanation: You use all your detective skills – like a chef using all the ingredients – to create the final dish.
Real‑life example: A detective uses all their training and tools to solve a crime.
School example: A student uses all their knowledge to write a great essay.
Home example: You use all your skills to host a great party.
Nigerian example: A Nigerian investigator uses all their Maltego skills to solve a complex case.
Illustration:
Complete Investigation:
+----------+ +----------+ +----------+
| Start | → | Use | → | Machines |
| Entity | | Transforms| | |
+----------+ +----------+ +----------+
|
v
+----------+ +----------+ +----------+
| Finish | ← | Analyze | ← | Footprint|
| Report | | Results | | Social |
+----------+ +----------+ +----------+
Mini summary: A complete investigation uses all the tools you have learned.
Definition: Even with advanced tools, you must always use them ethically and legally.
Why is it important? Ethics protect you and the people you investigate.
Simple explanation: Being ethical is like being a good detective – you don't spy on people or use information to hurt them.
Real‑life example: A journalist protects the identity of innocent people.
School example: A student gives credit to sources they used.
Home example: You respect your family's privacy.
Nigerian example: A Nigerian investigator follows the law and protects privacy.
Illustration:
Ethical Guidelines:
- Respect privacy
- Follow the law
- Use information responsibly
- Don't harm others
Mini summary: Always use advanced tools ethically and legally.
Definition: Some advanced transforms you will use often:
Why is it important? Knowing these transforms will speed up your investigations.
Simple explanation: These are your best tools – use them often.
Real‑life example: A detective uses their most-used tools every day.
School example: A student uses their best study methods.
Home example: You use your most-used kitchen utensils.
Nigerian example: A Nigerian investigator uses these transforms in almost every case.
Illustration:
Advanced Transforms:
+----------+ +----------+ +----------+
| DNS | | WHOIS | | IP |
| Records | | Lookup | | Address |
+----------+ +----------+ +----------+
+----------+ +----------+
| Hash | | Social |
| Lookup | | Media |
+----------+ +----------+
Mini summary: Advanced transforms help you find DNS, WHOIS, IP, hash, and social media data.
Definition: OSINT and Maltego are constantly evolving. New data sources and transforms are added regularly.
Why is it important? Staying updated helps you remain an effective investigator.
Simple explanation: Technology changes – you need to keep learning to stay ahead.
Real‑life example: Detectives learn new techniques to catch criminals.
School example: Students learn new topics every year.
Home example: You learn new recipes to cook better meals.
Nigerian example: Nigerian investigators stay updated to fight evolving cybercrime.
Illustration:
Future of OSINT:
+----------+
| New Data|
| Sources |
| New |
| Transforms|
| AI/ML |
+----------+
Mini summary: OSINT and Maltego are always evolving – keep learning!
| Word | Simple Definition |
|---|---|
| Machine | An automated sequence of transforms. |
| Footprinting | Gathering information about a target's digital presence. |
| BuiltWith | A transform that shows what technologies a website uses. |
| Dorking | Using special search operators to find information. |
| Hash | A unique code that identifies a file (like a fingerprint). |
| Malware | Malicious software designed to cause harm. |
| Threat Intelligence | Information about cyber threats and attackers. |
| WHOIS | A lookup that shows who owns a domain. |
| DNS | Domain Name System – translates domain names to IP addresses. |
| Cyber Threat | A potential attack on computer systems. |
This module introduces advanced concepts and techniques. Use real-world case studies and demonstrations to illustrate the power of Machines and footprinting. Encourage students to experiment with different Machines and transforms. Emphasise the importance of ethics and legality.
Encourage your child to explore Maltego's Machines and advanced transforms. Discuss the importance of online privacy and ethical research. Help them understand how these skills can be used responsibly to solve real-world problems.
| Machine Name | Purpose |
|---|---|
| Investigate Person | Finds emails, social media, and more for a person |
| Investigate Domain | Finds DNS records, emails, and websites for a domain |
| Malware Investigation | Finds information about a malware hash |
| Company Investigation | Finds employees, domains, and social media for a company |
+----------+ +----------+ +----------+
| Domain | -------> | DNS | -------> | IP |
+----------+ +----------+ +----------+
| | |
v v v
+----------+ +----------+ +----------+
| WHOIS | | BuiltWith| | Location |
+----------+ +----------+ +----------+
+----------+ +----------+ +----------+
| Person | -------> | Pipl | -------> | Facebook |
+----------+ +----------+ +----------+
| | |
v v v
+----------+ +----------+ +----------+
| Twitter | | Instagram| | LinkedIn |
+----------+ +----------+ +----------+
You have completed Module 3 – "Advanced Investigation Techniques"! You have learned how to use Machines to automate investigations, footprint infrastructure, and investigate social media and malware hashes.
These advanced techniques will make your investigations faster, more thorough, and more powerful. You are now ready to take on complex investigations with confidence.
Great work – you are now ready for Module 4!
| Term | Definition |
|---|---|
| 1. Machine | A. Shows what technologies a website uses |
| 2. Footprinting | B. A unique code that identifies a file |
| 3. BuiltWith | C. An automated sequence of transforms |
| 4. Hash | D. Gathering information about a target's digital presence |
| 5. WHOIS | E. A lookup that shows who owns a domain |
Answers: 1‑C, 2‑D, 3‑A, 4‑B, 5‑E
Scenario 1: A Nigerian bank has detected a malware attack. The security team has the malware hash. How can Maltego be used to investigate this attack?
Scenario 2: A journalist is investigating a corrupt politician. They have the politician's name and a website. How can Maltego help them find connections and evidence?
In groups, choose a real-world cyber threat (e.g., a known malware or phishing campaign). Use Maltego to investigate it – start with a hash or domain, use Machines and transforms, and present your findings to the class.
Choose a Nigerian company or person. Use Maltego to footprint their digital presence – find domains, social media, and other connections. Write a report on your findings.
Cyber Threat Investigation: Choose a known malware sample (use a public hash). Use Maltego to investigate it – find its name, type, origins, and related infrastructure. Create a graph and a report.
Write a step-by-step guide on how to use a Maltego Machine for a specific investigation (e.g., person investigation). Include screenshots (if possible) and explain each step.
Design a custom Machine for a specific investigation scenario (e.g., investigating a phishing campaign). List the transforms you would include and explain the logic behind each step.
Fill‑in‑the‑Blank: 1. Machine, 2. Footprinting, 3. BuiltWith, 4. Dorking, 5. hash, 6. Threat intelligence, 7. WHOIS, 8. DNS, 9. Pipl, 10. BuiltWith.
True/False: 1F, 2T, 3T, 4F, 5T, 6F, 7T, 8T, 9F, 10F.
Multiple Choice: 1B, 2B, 3B, 4A, 5A, 6A, 7A, 8A, 9A, 10A, 11B, 12C, 13A, 14A, 15A.
In Module 4, you will learn about customisation and collaboration – how to create your own entities and transforms, and how to collaborate with others on investigations. To prepare, think about what custom tools could make your investigations easier.
Excellent work, future investigator! See you in Module 4!
Hello, future investigator! In Module 3, you learned advanced techniques – using Machines, footprinting, and investigating social media and malware hashes. You have become a skilled Maltego user.
Now, it's time to make Maltego yours. In this module, you will learn how to customize Maltego – create your own entities and transforms – and how to collaborate with others on investigations.
Think of this module as learning to build your own tools and work as a team – just like real investigators do.
Let's begin with a story that shows how customization and collaboration can make investigations even more powerful!
After this module, you will be able to:
Aisha, Chidi, and Kofi worked together as a cybersecurity team at a Nigerian bank. They often investigated fraud cases together.
One day, they were investigating a complex case. They had a lot of data – phone numbers, emails, and bank accounts. They each worked on different parts, but they needed to share their findings.
Chidi said: "We can use Maltego's collaboration features! We can share our graphs with each other."
Aisha added: "And we can create custom entities for the specific data we're investigating – like a 'Bank Account' entity."
They worked together, sharing graphs and creating custom tools. Within hours, they had solved the case. They found the fraudster and stopped the scheme.
Now, let's learn how to customize Maltego and collaborate with others!
Definition: Customization means changing Maltego to fit your needs – like creating your own entities, transforms, and layouts.
Why is it important? Customization makes Maltego work better for you. It's like getting a custom-made suit instead of buying one off the rack.
Simple explanation: Customization is like decorating your room – you make it your own.
Real‑life example: A tailor makes a custom dress for you.
School example: You design your own study schedule.
Home example: You arrange your room the way you like it.
Nigerian example: A Nigerian investigator creates custom entities for Nigerian banking data.
Illustration:
Customization:
+----------+ +----------+
| Standard | -------> | Custom |
| Maltego | | Maltego |
+----------+ +----------+
| Fixed | | Made for |
| Entities | | Your |
| | | Needs |
+----------+ +----------+
Mini summary: Customization makes Maltego work better for you.
Definition: Maltego comes with standard entities – like Person, Domain, Email, and Phone Number. These are ready to use.
Why is it important? Standard entities cover most common investigation needs. They are a good starting point.
Simple explanation: Standard entities are like the default tools in a toolkit – they work for most jobs.
Real‑life example: A detective uses standard tools like a notebook and pen.
School example: You use standard school supplies like pencils and erasers.
Home example: You use standard kitchen utensils like spoons and knives.
Nigerian example: An investigator uses standard entities like "Person" and "Email".
Illustration:
Standard Entities:
+----------+ +----------+ +----------+
| Person | | Domain | | Email |
+----------+ +----------+ +----------+
| Phone | | URL | | IP |
+----------+ +----------+ +----------+
Mini summary: Standard entities cover common investigation needs.
Definition: Custom entities are entities you create yourself – for example, a "Bank Account" entity or a "Company" entity.
Why is it important? Custom entities let you work with data that isn't covered by standard entities.
Simple explanation: Creating custom entities is like adding a new tool to your toolkit – one that you designed yourself.
Real‑life example: A detective creates a new form for a specific type of case.
School example: You create a new folder for a specific project.
Home example: You create a new playlist for your favorite songs.
Nigerian example: A Nigerian investigator creates a "NIN" (National ID) entity.
Illustration:
Custom Entity:
+----------+
| Bank |
| Account |
+----------+
| Account |
| Number |
| Owner |
| Balance |
+----------+
Mini summary: Custom entities let you work with specialized data.
Definition: To create a custom entity, you open the Entity Manager, click "New", and fill in the details.
Why is it important? Knowing how to create entities gives you total control over your data.
Simple explanation: Creating a custom entity is like filling out a form – you give it a name, choose a type, and add properties.
Real‑life example: You create a new contact in your phone by entering their name and number.
School example: You create a new flashcard for studying.
Home example: You create a new recipe by writing down the ingredients.
Nigerian example: An investigator creates a "Bank Account" entity by entering account number, owner, and bank name.
Illustration:
Steps:
1. Open Entity Manager.
2. Click "New".
3. Enter a name (e.g., "BankAccount").
4. Choose a type (e.g., "Entity").
5. Add properties (e.g., "AccountNumber", "Owner").
6. Click "Save".
Mini summary: Custom entities are easy to create – just open the Entity Manager and add your own.
Definition: Custom transforms are transforms you create yourself – they let you fetch data from sources that aren't in Maltego by default.
Why is it important? Custom transforms let you bring in data from anywhere – internal databases, custom APIs, or specialized sources.
Simple explanation: Custom transforms are like building your own bridge to connect Maltego to new data sources.
Real‑life example: A company creates a transform to pull data from their internal customer database.
School example: A student creates a transform to pull data from a school library.
Home example: You create a transform to pull data from your family calendar.
Nigerian example: A Nigerian investigator creates a transform to pull data from the NIN database.
Illustration:
Custom Transform:
+----------+ +----------+
| Entity | -------> | Custom | -------> | New Data |
| | | Transform| | |
+----------+ +----------+ +----------+
| Person | | Fetch | | NIN |
| | | from NIN | | Address |
+----------+ +----------+ +----------+
Mini summary: Custom transforms bring in data from new sources.
Definition: Creating a custom transform involves writing code (usually in Python or Java) that tells Maltego how to fetch and return data.
Why is it important? Custom transforms are powerful – they can connect Maltego to almost any data source.
Simple explanation: A custom transform is like a small program that runs when you click it – it goes out, gets data, and brings it back.
Real‑life example: A developer writes a script to fetch data from a website.
School example: A student writes a program to calculate grades.
Home example: You write a script to organize your photos.
Nigerian example: An investigator writes a transform to fetch data from a Nigerian government database.
Illustration:
Transform Structure:
1. Input: Entity (e.g., Person)
2. Process: Fetch data (e.g., from NIN database)
3. Output: New entities (e.g., NIN, Address)
Mini summary: Custom transforms are small programs that fetch data.
Definition: Collaboration means working with others on the same investigation. Maltego has features that let you share graphs and work together.
Why is it important? Many investigations are too big for one person – teams need to work together.
Simple explanation: Collaboration is like working on a group project – you share the work and help each other.
Real‑life example: A team of detectives works together on a case.
School example: A group of students works together on a science project.
Home example: Family members work together to plan a party.
Nigerian example: A team of Nigerian investigators works together on a fraud case.
Illustration:
Collaboration:
+----------+ +----------+
| Person 1 | -------> | Shared | -------> | Person 2 |
| Graph | | Graph | | Graph |
+----------+ +----------+ +----------+
Mini summary: Collaboration means working together on an investigation.
Definition: Sharing graphs means sending your investigation to other Maltego users so they can view or edit it.
Why is it important? Sharing graphs is how teams collaborate – everyone can see the same picture.
Simple explanation: Sharing a graph is like sending a photo to your friends – they can see what you see.
Real‑life example: A detective shares a case file with their partner.
School example: A student shares a document with their group members.
Home example: You share a shopping list with your family.
Nigerian example: A Nigerian investigator shares a graph with their team.
Illustration:
Sharing a Graph:
1. Open your graph.
2. Go to File > Share.
3. Enter the email of the person you want to share with.
4. Choose permissions (view or edit).
5. Click "Share".
Mini summary: Sharing graphs lets teams work together.
Definition: Maltego has built-in collaboration tools – like shared graphs, comments, and version history.
Why is it important? These tools make it easy to work with a team.
Simple explanation: Collaboration tools are like the features in a group chat – they help you communicate and work together.
Real‑life example: A team uses a shared document to write a report together.
School example: A group uses a shared folder to store project files.
Home example: A family uses a shared calendar to plan events.
Nigerian example: A Nigerian team uses Maltego's collaboration tools to work on a case.
Illustration:
Collaboration Tools:
- Shared Graphs
- Comments
- Version History
- Real-time Updates
Mini summary: Maltego's collaboration tools make teamwork easy.
Definition: Best practices for collaboration include clear communication, documenting your work, and respecting others' contributions.
Why is it important? Good collaboration makes investigations faster and more accurate.
Simple explanation: Best practices are like rules for playing a game – they help everyone work together smoothly.
Real‑life example: A team has regular meetings to discuss progress.
School example: A group divides tasks among members and meets regularly.
Home example: A family has a weekly meeting to plan the week.
Nigerian example: A Nigerian team has clear roles and communication channels.
Illustration:
Collaboration Best Practices:
- Communicate clearly
- Document your work
- Respect others' contributions
- Use shared tools
- Review each other's work
Mini summary: Good collaboration practices make teamwork effective.
Definition: Version history lets you see who made changes to a graph and when – and you can go back to an earlier version if needed.
Why is it important? Version history prevents you from losing work and helps you track progress.
Simple explanation: Version history is like an undo button for your whole investigation.
Real‑life example: A writer uses version history to track changes to a document.
School example: A student uses version history to track changes to a project.
Home example: You use version history to track changes to a family tree.
Nigerian example: A Nigerian investigator uses version history to track changes to a graph.
Illustration:
Version History:
+----------+ +----------+
| Version | -------> | Version |
| 1 (Original)| | 2 (Edited)|
+----------+ +----------+
Mini summary: Version history tracks changes to your graph.
Definition: Comments are notes you can add to your graph to explain your work or share ideas with your team.
Why is it important? Comments help others understand your investigation and provide context.
Simple explanation: Comments are like sticky notes on your graph – they remind you and others of important things.
Real‑life example: A detective leaves notes on a case board.
School example: A student leaves comments in a shared document.
Home example: You leave notes on a family calendar.
Nigerian example: A Nigerian investigator adds comments to a graph to explain their findings.
Illustration:
Adding Comments:
1. Select an entity or link.
2. Right-click and choose "Add Comment".
3. Type your comment.
4. Click "Save".
Mini summary: Comments help explain your investigation.
Definition: The power of Maltego comes from combining customization and collaboration – you create custom tools and share them with your team.
Why is it important? Together, they make your team unstoppable.
Simple explanation: You build custom tools and share them with your team – it's like equipping your whole team with special gear.
Real‑life example: A team of detectives uses custom forms and shares case files.
School example: A group of students creates custom study materials and shares them.
Home example: A family creates custom recipes and shares them.
Nigerian example: A Nigerian team creates custom entities for Nigerian data and shares them.
Illustration:
Customization + Collaboration = Powerful Team
+----------+ +----------+
| Custom | -------> | Shared | -------> | Powerful |
| Tools | | Tools | | Team |
+----------+ +----------+ +----------+
Mini summary: Customization and collaboration together make a powerful team.
Definition: Here are some real-world examples of customization:
Why is it important? These examples show how customization can be used in different fields.
Simple explanation: Customization is like building tools for your specific job.
Real‑life example: A bank creates custom entities for fraud investigation.
School example: A school creates custom entities for student data.
Home example: You create custom entities for your personal projects.
Nigerian example: A Nigerian bank creates custom entities for NIN data.
Illustration:
Customization Examples:
+----------+ +----------+ +----------+
| Banking | | Healthcare| | Education|
+----------+ +----------+ +----------+
| Bank | | Patient | | Student |
| Account | | | | |
+----------+ +----------+ +----------+
Mini summary: Customization is used in many industries.
Definition: In a customized collaborative investigation, you create custom entities and transforms, share them with your team, and work together on shared graphs.
Why is it important? This is how professional investigators work – it's the ultimate goal of this module.
Simple explanation: You build the tools, share them with your team, and work together to solve the mystery.
Real‑life example: A team of investigators uses custom tools and shares their findings.
School example: A group of students builds custom study tools and shares them.
Home example: A family builds custom chore charts and shares them.
Nigerian example: A Nigerian team builds custom tools for fraud investigation and collaborates.
Illustration:
Customized Collaboration:
+----------+ +----------+ +----------+
| Custom | → | Share | → | Team |
| Entities | | with | | Works |
| Transforms| | Team | | Together |
+----------+ +----------+ +----------+
Mini summary: Customized collaboration is the ultimate goal – building tools and working as a team.
| Word | Simple Definition |
|---|---|
| Customization | Changing Maltego to fit your needs. |
| Custom Entity | An entity you create yourself. |
| Custom Transform | A transform you create yourself. |
| Collaboration | Working with others on an investigation. |
| Shared Graph | A graph that is shared with others. |
| Version History | A record of changes made to a graph. |
| Comment | A note added to a graph to explain your work. |
| Entity Manager | The tool in Maltego for creating and managing entities. |
| Team | A group of people working together. |
| API | A way for programs to talk to each other (used in custom transforms). |
This module introduces customization and collaboration – advanced topics that empower students to take full control of Maltego. Use demonstrations to show how to create entities and share graphs. Emphasise the importance of teamwork and communication in investigations.
Encourage your child to think about how customization can make their work easier. Discuss the importance of collaboration and teamwork. Help them understand that sharing and communication are key to successful investigations.
| Feature | Standard | Custom |
|---|---|---|
| Entities | Person, Domain, Email | BankAccount, NIN, Patient |
| Transforms | To Email, To Domain | Fetch NIN, Fetch Account |
| Flexibility | Limited to built-in | Unlimited |
+----------+ +----------+ +----------+
| Open | -------> | Click | -------> | Enter |
| Entity | | New | | Name |
+----------+ +----------+ +----------+
|
v
+----------+ +----------+ +----------+
| Save | <------- | Add | <------- | Choose |
| Entity | | Properties| | Type |
+----------+ +----------+ +----------+
+----------+ +----------+ +----------+
| Create | -------> | Share | -------> | Team |
| Graph | | Graph | | Works |
+----------+ +----------+ +----------+
|
v
+----------+ +----------+ +----------+
| Add | <------- | Review | <------- | Discuss |
| Comments | | Changes | | Findings |
+----------+ +----------+ +----------+
You have completed Module 4 – "Customization & Collaboration"! You have learned how to create custom entities and transforms, how to share graphs and work with others, and how to use collaboration tools like comments and version history.
These skills make you a more powerful investigator – you can now build your own tools and work effectively as part of a team.
Great work – you are now ready for Module 5!
| Term | Definition |
|---|---|
| 1. Customization | A. A record of changes to a graph |
| 2. Custom Entity | B. Working with others |
| 3. Collaboration | C. Changing Maltego to fit your needs |
| 4. Version History | D. An entity you create yourself |
| 5. Comment | E. A note added to a graph |
Answers: 1‑C, 2‑D, 3‑B, 4‑A, 5‑E
Scenario 1: A Nigerian bank wants to investigate fraud. They need to track bank accounts, phone numbers, and NINs. How can they use customization and collaboration to solve this case?
Scenario 2: A team of investigators is working on a missing person case. They have data from social media, phone records, and public records. How can they collaborate using Maltego?
In groups, design a custom entity for a specific investigation (e.g., "Fraudster" entity with name, phone, and NIN). Create the entity in Maltego, add some sample data, and share the graph with another group.
Create a custom entity for a topic of your choice (e.g., "Book" entity with title, author, and year). Add a few sample entities to a graph and save it. Write a short explanation of why you chose these properties.
Create a Custom Investigation Toolkit: Design a set of custom entities and transforms for a specific type of investigation (e.g., fraud, missing person, cyber threat). Create a sample graph using your custom tools and share it with the class.
Write a user guide for creating and using a custom entity in Maltego. Include step-by-step instructions, screenshots (if possible), and an explanation of why custom entities are useful.
Create a custom transform that fetches data from a public API (e.g., a weather API or a public data API). Use the transform in a Maltego graph and share the results with the class.
Fill‑in‑the‑Blank: 1. Customization, 2. custom entity, 3. custom transform, 4. Collaboration, 5. shared graph, 6. Version history, 7. comment, 8. Entity Manager, 9. team, 10. Version history.
True/False: 1F, 2T, 3F, 4T, 5F, 6T, 7F, 8T, 9F, 10T.
Multiple Choice: 1B, 2B, 3B, 4B, 5A, 6A, 7A, 8A, 9A, 10A, 11A, 12A, 13A, 14A, 15A.
In Module 5, you will learn about ethical and legal considerations – how to conduct investigations responsibly, respect privacy, and follow the law. To prepare, think about the importance of ethics in your daily life and how it applies to investigations.
Excellent work, future investigator! See you in Module 5!
Hello, future investigator! In Module 4, you learned how to customize Maltego and collaborate with others. You have become a skilled investigator with powerful tools at your fingertips.
With great power comes great responsibility. In this module, you will learn about ethics and legal considerations – how to conduct investigations responsibly, respect privacy, and follow the law.
Think of this module as learning the rules of the road – just like you need traffic rules to drive safely, you need ethical and legal rules to investigate safely and fairly.
Let's begin with a story that shows why ethics and legality are so important!
After this module, you will be able to:
Aisha was a new investigator at a Nigerian cybersecurity firm. She was excited to use her new Maltego skills to solve cases.
One day, she was investigating a fraud case. She found a lot of information about a suspect – including their phone number, address, and family members. She was about to share this information with her team.
But then she remembered her training. She thought: "Is it ethical to share this information? Do I have permission to use it? Could this harm innocent people?"
She asked her supervisor, who said: "Good question, Aisha. We must always respect privacy and follow the law. Only use information that is public and relevant to the case. And never share information that could harm someone."
Aisha learned an important lesson: being a good investigator means being ethical and responsible.
Now, let's learn how to be responsible investigators!
Definition: Ethics is the study of what is right and wrong. In investigations, ethics means doing the right thing and respecting others.
Why is it important? Without ethics, investigations could harm innocent people and break the law.
Simple explanation: Ethics is like a compass – it tells you the right direction to go.
Real‑life example: A journalist protects the identity of a source to keep them safe.
School example: A student gives credit to sources they used in a project.
Home example: You respect your family's privacy and don't share their secrets.
Nigerian example: A Nigerian investigator follows ethical guidelines to protect citizens' data.
Illustration:
+---------------------+
| Ethics |
+---------------------+
| - Doing the right |
| thing |
| - Respecting |
| others |
| - Following the |
| law |
+---------------------+
Mini summary: Ethics means doing the right thing and respecting others.
Definition: OSINT is legal as long as you only use public information and do not break any laws.
Why is it important? Breaking the law can lead to serious consequences – including fines and jail time.
Simple explanation: OSINT is like reading a book in a library – it's legal. Hacking is like breaking into the library – it's illegal.
Real‑life example: A company uses OSINT to find information about a competitor – that's legal.
School example: A student uses the internet to research a topic – that's legal.
Home example: You look up a recipe online – that's legal.
Nigerian example: A Nigerian investigator uses OSINT to find public records – that's legal.
Illustration:
Legal OSINT:
+----------+ +----------+
| Public | -------> | Legal |
| Sources | | OSINT |
+----------+ +----------+
| Social | | No |
| Media | | Hacking |
| Websites | | No |
| News | | Trespass |
+----------+ +----------+
Mini summary: OSINT is legal when you use public information and follow the law.
Definition: GDPR (General Data Protection Regulation) is a law in Europe that protects people's personal data.
Why is it important? GDPR sets a high standard for data protection and has inspired similar laws worldwide.
Simple explanation: GDPR is like a rulebook that says companies must treat your data with respect.
Real‑life example: A company must ask your permission before using your data.
School example: A school must protect student data and only use it for approved purposes.
Home example: You have the right to know how your data is being used.
Nigerian example: NDPR is based on GDPR principles.
Illustration:
GDPR Principles:
- Lawfulness, fairness, transparency
- Purpose limitation
- Data minimisation
- Accuracy
- Storage limitation
- Integrity and confidentiality
Mini summary: GDPR is a law that protects people's data.
Definition: NDPR (Nigeria Data Protection Regulation) is Nigeria's data protection law – it regulates how personal data is collected, used, and protected in Nigeria.
Why is it important? It protects the privacy of Nigerian citizens and sets rules for organisations.
Simple explanation: NDPR is like a Nigerian rulebook for data – it tells companies how to handle your data safely.
Real‑life example: A Nigerian bank must follow NDPR to protect customer data.
School example: A Nigerian school must protect student data according to NDPR.
Home example: You have the right to know how your data is used by Nigerian companies.
Nigerian example: A fintech app must follow NDPR and get your consent before using your data.
Illustration:
NDPR Principles:
- Lawfulness
- Consent
- Purpose limitation
- Data quality
- Security
- Accountability
Mini summary: NDPR is Nigeria's data protection law.
Definition: GDPR is European, NDPR is Nigerian. Both protect data, but they have different rules and penalties.
Why is it important? If you investigate in Nigeria, you must follow NDPR. If you work with European data, you must follow GDPR.
Simple explanation: GDPR and NDPR are like different traffic rules for different countries – you follow the rules of the country you're in.
Real‑life example: A Nigerian company with European customers must follow both NDPR and GDPR.
School example: A school in Nigeria follows NDPR; a school in Europe follows GDPR.
Home example: You follow the rules of your country.
Nigerian example: A Nigerian investigator must follow NDPR.
Illustration:
GDPR vs NDPR:
+----------+ +----------+
| GDPR | | NDPR |
+----------+ +----------+
| Europe | | Nigeria |
| Fines: | | Fines: |
| €20M | | ₦10M |
+----------+ +----------+
Mini summary: GDPR is European; NDPR is Nigerian. Both protect data.
Definition: Privacy means protecting people's personal information – like their name, address, and phone number – from misuse.
Why is it important? People have a right to keep their personal information private.
Simple explanation: Privacy is like keeping your diary private – you don't want everyone to read it.
Real‑life example: A website asks for your permission before collecting your data.
School example: A school keeps student records confidential.
Home example: You keep your personal documents in a safe place.
Nigerian example: A bank keeps customer information private and secure.
Illustration:
+---------------------+
| Privacy |
+---------------------+
| - Personal data |
| - Consent |
| - Confidentiality |
+---------------------+
Mini summary: Privacy protects personal information from misuse.
Definition: Responsible data use means using data only for its intended purpose, protecting it, and not misusing it.
Why is it important? Misusing data can harm people and break the law.
Simple explanation: Responsible data use is like borrowing a book – you take care of it and return it on time.
Real‑life example: A company uses customer data only for the purpose they agreed to.
School example: A student uses research data only for their project.
Home example: You use a friend's phone only for its intended purpose.
Nigerian example: A Nigerian investigator uses data only for the investigation they are working on.
Illustration:
Responsible Data Use:
- Use data for its intended purpose
- Protect data from misuse
- Don't share data without permission
- Delete data when no longer needed
Mini summary: Responsible data use means using data for its intended purpose and protecting it.
Definition: An ethical dilemma is a situation where you have to choose between two options, both of which have ethical implications.
Why is it important? Ethical dilemmas are common in investigations – knowing how to handle them is crucial.
Simple explanation: An ethical dilemma is like being at a crossroads – you have to choose which path to take.
Real‑life example: You find evidence that could help a case, but it might hurt an innocent person.
School example: You see a friend cheating on a test – do you tell the teacher?
Home example: You find a wallet on the street – do you keep it or try to find the owner?
Nigerian example: An investigator finds information that could expose a corrupt official, but it might also reveal private information about innocent family members.
Illustration:
Ethical Dilemma:
+----------+ +----------+
| Option A | -------> | You |
+----------+ +----------+
| | | |
+----------+ +----------+
| Option B | | |
+----------+ +----------+
Mini summary: Ethical dilemmas require you to make difficult choices.
Definition: Handling ethical dilemmas means thinking carefully, seeking advice, and making the best decision.
Why is it important? Handling dilemmas well protects you and others.
Simple explanation: When you face a dilemma, stop and think – what is the right thing to do?
Real‑life example: An investigator consults their supervisor before sharing sensitive information.
School example: A student asks a teacher for help with an ethical dilemma.
Home example: You ask a parent for advice on a difficult decision.
Nigerian example: A Nigerian investigator follows their organization's ethical guidelines.
Illustration:
Handling Dilemmas:
1. Identify the dilemma
2. Consider the options
3. Think about the consequences
4. Seek advice if needed
5. Make a decision
6. Reflect on the outcome
Mini summary: Handling ethical dilemmas requires thought, advice, and careful decision-making.
Definition: Best practices are guidelines that help you conduct investigations ethically and legally.
Why is it important? Following best practices ensures you stay on the right side of the law and ethics.
Simple explanation: Best practices are like a checklist – they help you do things the right way.
Real‑life example: A company has a policy that investigators must respect privacy.
School example: A school has a code of conduct for students.
Home example: A family has rules for using devices and the internet.
Nigerian example: A Nigerian organization has ethical guidelines for investigators.
Illustration:
Best Practices:
- Respect privacy
- Follow the law
- Use data responsibly
- Verify information
- Document your steps
- Seek advice when unsure
Mini summary: Best practices help you conduct ethical and legal investigations.
Definition: Protecting yourself means taking steps to stay safe – both physically and legally.
Why is it important? Investigations can be risky – you need to protect yourself.
Simple explanation: Protecting yourself is like wearing a helmet when riding a bike – it keeps you safe.
Real‑life example: An investigator uses a VPN to protect their identity online.
School example: A student uses a password to protect their school account.
Home example: You lock your phone with a PIN to protect your data.
Nigerian example: A Nigerian investigator uses secure communication channels.
Illustration:
Protecting Yourself:
- Use strong passwords
- Use a VPN
- Keep software updated
- Be careful what you share
- Follow your organization's guidelines
Mini summary: Protect yourself by using security measures and following guidelines.
Definition: Unethical conduct can lead to serious consequences – including loss of job, fines, and legal action.
Why is it important? Understanding consequences helps you avoid unethical behavior.
Simple explanation: Unethical behavior is like breaking the rules in a game – you might get penalized.
Real‑life example: A journalist who violates privacy can lose their job.
School example: A student who plagiarizes can fail the assignment.
Home example: You break a family rule and lose a privilege.
Nigerian example: An investigator who violates NDPR can be fined.
Illustration:
Consequences:
- Loss of job
- Fines
- Legal action
- Loss of trust
- Damage to reputation
Mini summary: Unethical conduct has serious consequences.
Definition: Transparency means being open and honest about your investigation – what you did, how you did it, and why.
Why is it important? Transparency builds trust and ensures accountability.
Simple explanation: Transparency is like showing your work in math class – it shows how you got your answer.
Real‑life example: A company publishes a report on how they use data.
School example: A student explains their research methods.
Home example: You explain to your parents how you used your phone.
Nigerian example: A Nigerian organization shares their investigation methods.
Illustration:
Transparency:
- Explain your methods
- Share your sources
- Document your steps
- Be open about your findings
Mini summary: Transparency builds trust and accountability.
Definition: A case study is a real-world example that shows how ethical principles are applied.
Why is it important? Case studies help you learn from real situations.
Simple explanation: A case study is like a story that teaches you a lesson.
Real‑life example: An investigator in Nigeria follows NDPR while investigating a fraud case.
School example: A school follows data protection laws when handling student records.
Home example: A family discusses online privacy and sets rules.
Nigerian example: A Nigerian bank uses ethical OSINT to prevent fraud.
Illustration:
Case Study: Nigerian Bank Investigation
- Goal: Investigate a fraud case
- Data: Publicly available records
- Ethics: Follow NDPR, respect privacy
- Outcome: Fraud stopped, no privacy violations
Mini summary: Case studies show how ethics are applied in real investigations.
Definition: Being an ethical investigator means using your skills responsibly, respecting others, and following the law.
Why is it important? Ethical investigators are trusted and respected. They make the world a better place.
Simple explanation: Being an ethical investigator is like being a good citizen – you do the right thing and help others.
Real‑life example: An ethical investigator protects innocent people and brings criminals to justice.
School example: An ethical student helps others and follows the rules.
Home example: An ethical family member respects others and helps out.
Nigerian example: An ethical Nigerian investigator helps make the country safer.
Illustration:
Ethical Investigator:
+----------+ +----------+ +----------+
| Skills | + | Ethics | = | Trusted |
| | | | | Expert |
+----------+ +----------+ +----------+
Mini summary: Being an ethical investigator means using your skills responsibly.
| Word | Simple Definition |
|---|---|
| Ethics | Doing the right thing and respecting others. |
| GDPR | European data protection law. |
| NDPR | Nigeria Data Protection Regulation. |
| Privacy | Protecting personal information. |
| Responsible Data Use | Using data for its intended purpose and protecting it. |
| Ethical Dilemma | A situation where you must choose between two options, both with ethical implications. |
| Transparency | Being open and honest about your investigation. |
| Consent | Permission to use someone's data. |
| Compliance | Following the law and regulations. |
| Confidentiality | Keeping information secret. |
This module covers ethics and legal considerations – essential topics for any investigator. Use real-world case studies and ethical dilemmas to engage students. Emphasize the importance of respect, privacy, and the law. Encourage students to think critically about ethical issues.
Encourage your child to think about ethics and privacy in their daily lives. Discuss the importance of respecting others' privacy and following the law. Help them understand the consequences of unethical behavior.
| Feature | GDPR | NDPR |
|---|---|---|
| Region | Europe | Nigeria |
| Year | 2018 | 2019 |
| Fines | Up to €20 million | Up to ₦10 million |
| Key Principle | Consent | Lawfulness |
+----------+ +----------+ +----------+
| Identify | -------> | Use | -------> | Respect |
| Goal | | Public | | Privacy |
| | | Sources | | |
+----------+ +----------+ +----------+
| | |
v v v
+----------+ +----------+ +----------+
| Follow | <------- | Document | <------- | Seek |
| Law | | Steps | | Advice |
+----------+ +----------+ +----------+
+------------------+
| Identify Dilemma |
+--------+---------+
|
+--------v---------+
| Consider Options |
+--------+---------+
|
+--------v---------+
| Think of |
| Consequences |
+--------+---------+
|
+--------v---------+
| Seek Advice |
+--------+---------+
|
+--------v---------+
| Make Decision |
+--------+---------+
|
+--------v---------+
| Reflect on |
| Outcome |
+------------------+
You have completed Module 5 – "Ethical & Legal Considerations"! You have learned what ethics means in investigations, how to follow the law, and how to respect privacy. You now understand GDPR, NDPR, and the importance of responsible data use.
Being an ethical investigator is just as important as having technical skills. You are now ready to conduct investigations with integrity and responsibility.
Great work – you are now ready for Module 6!
| Term | Definition |
|---|---|
| 1. Ethics | A. Protecting personal information |
| 2. Privacy | B. Doing the right thing |
| 3. GDPR | C. Nigeria's data protection law |
| 4. NDPR | D. European data protection law |
| 5. Transparency | E. Being open and honest about your investigation |
Answers: 1‑B, 2‑A, 3‑D, 4‑C, 5‑E
Scenario 1: You are investigating a fraud case. You find a phone number that belongs to a suspect. You also find the suspect's family members' phone numbers. Should you investigate the family members? Why or why not?
Scenario 2: A Nigerian company wants to investigate a potential business partner. They use OSINT to find information. What ethical and legal considerations should they keep in mind?
In groups, discuss an ethical dilemma you might face as an investigator. Create a skit showing how you would handle the dilemma. Present your skit to the class and discuss the ethical principles involved.
Write a short essay on the importance of ethics in OSINT investigations. Include examples of ethical dilemmas and how you would handle them.
Create an Ethical Guidelines Poster: Design a poster or infographic that outlines the key ethical and legal principles for OSINT investigations. Include tips on privacy, data protection, and responsible data use.
Write a code of conduct for a team of investigators. Include rules for privacy, data protection, transparency, and handling ethical dilemmas.
Research a real-world case where an investigator faced an ethical dilemma. Write a report on the case, the dilemma, and how it was (or should have been) handled.
Fill‑in‑the‑Blank: 1. Ethics, 2. public, 3. GDPR, 4. NDPR, 5. Privacy, 6. Responsible data use, 7. ethical dilemma, 8. Transparency, 9. legal, 10. Ethical.
True/False: 1F, 2F, 3T, 4T, 5T, 6F, 7F, 8T, 9F, 10T.
Multiple Choice: 1B, 2C, 3B, 4B, 5B, 6B, 7B, 8C, 9B, 10B, 11B, 12B, 13B, 14B, 15B.
In Module 6, you will apply everything you have learned in case studies and a final project. You will investigate a real-world scenario, create a graph, and present your findings. To prepare, think about what you have learned and how you can apply it to a real investigation.
Excellent work, future investigator! See you in Module 6!
Hello, future investigator! You have reached the final module of your journey to become a Certified Maltego User. You have learned so much – from the basics of OSINT and Maltego to advanced techniques, customization, collaboration, and ethics.
Now, it's time to put everything together. In this module, you will explore real-world case studies that show how Maltego is used to solve problems. You will also complete a final project where you will conduct your own investigation.
Think of this module as your graduation – you will show everything you have learned and prove that you are ready to be a Certified Maltego User.
Let's begin with a story that shows how Maltego can solve real-world problems!
After this module, you will be able to:
Aisha, Chidi, and Kofi had completed their Maltego training. They were now certified investigators. But their instructor gave them one final challenge: a real-world case to solve.
The case: A Nigerian company had been hacked. The attackers had stolen customer data. The team had to find out who was behind the attack.
They started by adding the attackers' IP address to a Maltego graph. They ran transforms to find associated domains, emails, and social media profiles. They worked together, sharing graphs and adding comments.
Within a day, they had a complete picture – the attackers were a group of cybercriminals operating from another country. They reported their findings to the company, who took action to stop the attack.
Their instructor said: "You have shown that you are true investigators. You are now ready to take on any case."
Now, it's your turn to take on a final case!
Definition: A case study is a real-world example that shows how a problem was solved. It's like a story that teaches you a lesson.
Why is it important? Case studies help you learn from real situations and see how Maltego is used in practice.
Simple explanation: A case study is like a detective story – it shows how the mystery was solved.
Real‑life example: A case study of how a bank used Maltego to catch fraudsters.
School example: A case study of how a student used research to solve a problem.
Home example: A case study of how a family planned a successful party.
Nigerian example: A case study of how a Nigerian company used Maltego to stop a cyber attack.
Illustration:
+----------+ +----------+ +----------+
| Problem | -------> | Solution | -------> | Lesson |
+----------+ +----------+ +----------+
| | | (Maltego)| | Learned |
+----------+ +----------+ +----------+
Mini summary: Case studies show real-world examples of Maltego in action.
Definition: A phishing campaign is when criminals send fake emails to trick people into giving away their information.
Why is it important? Phishing is a common cyber threat – understanding how to investigate it is crucial.
Simple explanation: Phishing is like a trick – criminals pretend to be someone they're not to get your secrets.
Real‑life example: A company receives fake emails pretending to be from a bank.
School example: A student gets a fake email pretending to be from the school.
Home example: You get a fake email pretending to be from a family member.
Nigerian example: A Nigerian company gets phishing emails pretending to be from a supplier.
Illustration:
Phishing Investigation:
1. Start with the phishing email (sender, domain).
2. Add the domain to Maltego.
3. Use transforms to find related domains, IPs, and emails.
4. Connect the dots to find the attacker.
Mini summary: Phishing investigations track fake emails to find the criminals.
Definition: Corporate intelligence is gathering information about a company to understand its operations, risks, and opportunities.
Why is it important? Companies need to understand their competitors and partners to make good decisions.
Simple explanation: Corporate intelligence is like doing research on a company before investing in it.
Real‑life example: A company investigates a potential business partner.
School example: A student researches a university before applying.
Home example: A family researches a new house before buying it.
Nigerian example: A Nigerian company investigates a potential supplier.
Illustration:
Corporate Intelligence:
1. Start with the company name.
2. Add it to Maltego.
3. Use transforms to find domains, emails, and social media.
4. Build a picture of the company's operations.
Mini summary: Corporate intelligence gathers information about companies.
Definition: The dark web is a part of the internet that is not indexed by search engines and is often used for illegal activities.
Why is it important? Criminals use the dark web to sell stolen data and plan attacks.
Simple explanation: The dark web is like a hidden market where criminals do business.
Real‑life example: A company investigates if their data is being sold on the dark web.
School example: A student learns about the dark web in a cybersecurity class.
Home example: You learn about the dark web to understand online risks.
Nigerian example: A Nigerian investigator searches the dark web for stolen data.
Illustration:
Dark Web Investigation:
1. Start with a piece of stolen data (e.g., a credit card number).
2. Add it to Maltego.
3. Use transforms to find related data.
4. Identify the sellers and buyers.
Mini summary: Dark web investigations track illegal activities online.
Definition: Social media investigation uses information from social media platforms to find connections and gather intelligence.
Why is it important? People share a lot of information on social media – it's a rich source of OSINT.
Simple explanation: Social media investigation is like looking at someone's posts to learn about their life and connections.
Real‑life example: A detective uses social media to track a suspect's friends.
School example: A student uses social media to research a famous person.
Home example: You look at a friend's social media to see what they've been doing.
Nigerian example: An investigator uses social media to find connections between suspects.
Illustration:
Social Media Investigation:
1. Start with a username or person's name.
2. Add it to Maltego.
3. Use transforms to find social media accounts.
4. Connect the accounts to find networks.
Mini summary: Social media investigations use online profiles to find connections.
Definition: Cyber threat intelligence is information about cyber threats – like who is attacking, how they attack, and what they are after.
Why is it important? It helps organizations defend against attacks.
Simple explanation: Cyber threat intelligence is like knowing a thief's habits – it helps you protect your house.
Real‑life example: A security team uses threat intelligence to stop attacks.
School example: A teacher uses intelligence to know which students need extra help.
Home example: You use intelligence to know when to lock your doors.
Nigerian example: A Nigerian security team uses threat intelligence to protect a bank.
Illustration:
Cyber Threat Intelligence:
1. Start with a threat indicator (e.g., malware hash, IP).
2. Add it to Maltego.
3. Use transforms to find related data.
4. Identify the attacker and their methods.
Mini summary: Cyber threat intelligence helps you understand and defend against attacks.
Definition: Your final project is a complete investigation where you will use all the skills you have learned.
Why is it important? This is your chance to show everything you can do.
Simple explanation: Your final project is like a final exam – you prove that you are ready to be a Certified Maltego User.
Real‑life example: A detective solves a final case to prove their skills.
School example: A student completes a final project to graduate.
Home example: A person completes a big project to show their skills.
Nigerian example: A Nigerian investigator completes a project to get certified.
Illustration:
Final Project:
+----------+ +----------+ +----------+
| Plan | → | Investigate| → | Present |
+----------+ +----------+ +----------+
| | | | | |
+----------+ +----------+ +----------+
Mini summary: Your final project is a complete investigation that demonstrates your skills.
Definition: Your project topic is what you will investigate. Choose something that interests you.
Why is it important? You will be more motivated if you are interested in the topic.
Simple explanation: Choose a topic that you find exciting – like a mystery you want to solve.
Real‑life example: Investigate a real or fictional cyber attack.
School example: Investigate a historical event using OSINT.
Home example: Investigate a family mystery.
Nigerian example: Investigate a Nigerian fraud case.
Illustration:
Topic Ideas:
- Investigate a phishing campaign
- Investigate a company
- Investigate a person of interest
- Investigate a cyber threat
- Investigate a social media network
Mini summary: Choose a project topic that interests you.
Definition: Planning means deciding what steps you will take and what tools you will use.
Why is it important? A good plan helps you stay organized and focused.
Simple explanation: Planning is like drawing a map before a journey – it shows you the way.
Real‑life example: A detective plans their investigation before starting.
School example: A student plans their project before starting.
Home example: A family plans their vacation before traveling.
Nigerian example: An investigator plans their case before starting.
Illustration:
Investigation Plan:
1. Define your goal (what do you want to find?).
2. Identify your starting entity (clue).
3. List the transforms you will use.
4. Decide how you will organize your graph.
5. Plan how you will document and present your findings.
Mini summary: Planning your investigation helps you stay organized.
Definition: Conducting your investigation means actually doing the work – adding entities, running transforms, and analyzing results.
Why is it important? This is where you find the answers.
Simple explanation: Conducting the investigation is like going on a treasure hunt – you follow the clues to find the treasure.
Real‑life example: A detective interviews witnesses and collects evidence.
School example: A student conducts experiments and collects data.
Home example: You follow a recipe and cook a meal.
Nigerian example: An investigator gathers evidence and interviews suspects.
Illustration:
Conducting Investigation:
1. Add your starting entity.
2. Run transforms to find new data.
3. Analyze the results.
4. Add new entities and run more transforms.
5. Repeat until you have the full picture.
Mini summary: Conducting the investigation is where you find the answers.
Definition: Documenting means writing down what you found and how you found it – like a report.
Why is it important? Documentation helps others understand your work and makes you a professional investigator.
Simple explanation: Documenting is like writing a lab report – you explain what you did and what you found.
Real‑life example: A detective writes a case report.
School example: A student writes a project report.
Home example: You write a summary of a family event.
Nigerian example: An investigator writes a report for their organization.
Illustration:
Documentation:
- Introduction (what you investigated)
- Methods (how you did it)
- Findings (what you found)
- Conclusion (what it means)
- Recommendations (what to do next)
Mini summary: Documenting your findings makes your investigation professional.
Definition: A professional graph is clean, organized, and easy to understand.
Why is it important? A good graph makes your findings clear and impressive.
Simple explanation: A professional graph is like a well-organized poster – it's easy to read and looks good.
Real‑life example: A detective's case board is organized and clear.
School example: A student's project poster is neat and professional.
Home example: A family photo album is organized and beautiful.
Nigerian example: An investigator's graph is clear and professional.
Illustration:
Professional Graph:
- Use clear labels
- Organize entities logically
- Use colors to show different types
- Add comments for explanation
- Export as a high-quality image
Mini summary: A professional graph is clear, organized, and easy to understand.
Definition: Presenting means showing your findings to others – explaining what you did, what you found, and what it means.
Why is it important? Presenting is a key skill for investigators – you need to communicate your findings effectively.
Simple explanation: Presenting is like telling a story – you share your investigation journey and what you discovered.
Real‑life example: A detective presents evidence in court.
School example: A student presents their project to the class.
Home example: You tell your family about an adventure.
Nigerian example: An investigator presents their findings to their team.
Illustration:
Presenting:
- Introduce yourself and your topic
- Show your graph
- Explain your steps
- Share your findings
- Discuss the implications
- Answer questions
Mini summary: Presenting your findings is a key skill for investigators.
Definition: Reflection means thinking about what you learned, what you enjoyed, and what you found challenging.
Why is it important? Reflection helps you understand your progress and plan for the future.
Simple explanation: Reflection is like looking back at a journey – you see how far you've come.
Real‑life example: An investigator reflects on a solved case to learn for the future.
School example: A student reflects on a project to see what they learned.
Home example: A person reflects on a family event to remember it.
Nigerian example: An investigator reflects on their training to see how they have grown.
Illustration:
Reflection Questions:
- What did I learn in this course?
- What was the most fun part?
- What was the most challenging part?
- What would I do differently next time?
- What do I want to learn next?
Mini summary: Reflection helps you understand your growth and plan for the future.
Definition: The journey doesn't end here. You can continue to learn and grow as an investigator.
Why is it important? Technology and threats are always changing – you need to keep learning.
Simple explanation: The future is like a new adventure – there's always more to explore.
Real‑life example: An investigator attends training to learn new skills.
School example: A student takes advanced courses to learn more.
Home example: A person learns new hobbies to stay engaged.
Nigerian example: A Nigerian investigator joins a community to stay updated.
Illustration:
Next Steps:
- Join the Maltego community
- Explore advanced transforms
- Learn about new OSINT tools
- Practice on new cases
- Share your knowledge with others
Mini summary: Keep learning and growing as an investigator.
| Word | Simple Definition |
|---|---|
| Case Study | A real-world example that shows how a problem was solved. |
| Phishing | A trick where criminals send fake emails to steal information. |
| Corporate Intelligence | Gathering information about a company. |
| Dark Web | A hidden part of the internet used for illegal activities. |
| Social Media Investigation | Using social media to find information. |
| Cyber Threat Intelligence | Information about cyber threats. |
| Final Project | A complete investigation that demonstrates your skills. |
| Documentation | Writing down what you found and how you found it. |
| Professional Graph | A clear, organized, and easy-to-understand graph. |
| Presentation | Showing your findings to others. |
This module is the culmination of the course. Guide students through the case studies and final project. Provide feedback on their graphs and reports. Celebrate their achievements and encourage them to continue learning. The final project should be a significant piece of work that demonstrates all the skills they have learned.
Encourage your child to choose a project topic that excites them. Help them plan their investigation and provide feedback on their graph and report. Celebrate their achievements and encourage them to continue exploring the world of OSINT and Maltego.
| Case Study | Problem | Solution | Lesson |
|---|---|---|---|
| Phishing | Fake emails | Track domains and IPs | Phishing can be traced |
| Corporate Intel | Unknown company | Gather public info | Companies are transparent |
| Dark Web | Stolen data | Track data sources | Dark web is traceable |
| Social Media | Unknown connections | Find profiles | Social media reveals much |
+----------+ +----------+ +----------+
| Choose | -------> | Plan | -------> | Investigate|
| Topic | | | | |
+----------+ +----------+ +----------+
| | |
v v v
+----------+ +----------+ +----------+
| Document | <------- | Analyze | <------- | Run |
| | | | | Transforms|
+----------+ +----------+ +----------+
|
v
+----------+
| Present |
+----------+
+---------------------------------------+
| Reflection |
+---------------------------------------+
| +----------+ +----------+ |
| | What did | | What was | |
| | I learn? | | fun? | |
| +----------+ +----------+ |
| +----------+ +----------+ |
| | What was | | What next?| |
| | hard? | | | |
| +----------+ +----------+ |
+---------------------------------------+
You have completed Module 6 – "Case Studies & Final Project"! You have explored real-world case studies that show how Maltego is used to solve problems. You have also planned, conducted, documented, and presented your own investigation.
You are now ready to be a Certified Maltego User! You have demonstrated that you can use Maltego effectively and ethically to solve real-world problems.
Congratulations, future investigator! You have earned your certification!
| Term | Definition |
|---|---|
| 1. Case Study | A. A hidden part of the internet |
| 2. Phishing | B. Information about cyber threats |
| 3. Dark Web | C. A real-world example |
| 4. Cyber Threat Intel | D. A trick to steal information |
| 5. Final Project | E. A complete investigation |
Answers: 1‑C, 2‑D, 3‑A, 4‑B, 5‑E
Scenario 1: A Nigerian company has been hit by a phishing attack. The attackers are using fake emails that look like they come from the company's CEO. How would you investigate this using Maltego?
Scenario 2: A detective is investigating a missing person. The person has social media accounts and a known phone number. How can Maltego help the detective find clues?
In groups, choose a case study topic (e.g., phishing, corporate intelligence, social media investigation). Conduct a mock investigation using Maltego and present your findings to the class.
Complete your final project. Choose a topic, plan your investigation, conduct it, document your findings, create a professional graph, and present your findings to the class.
Conduct a Mini Investigation: Choose a small topic (e.g., a local business, a public figure, or a social media network). Use Maltego to conduct a mini investigation and create a graph. Write a short report and present your findings.
Write a step-by-step guide for conducting a Maltego investigation, from choosing a topic to presenting findings. Include tips and best practices.
Design a new case study for a Maltego investigation. Describe the problem, the steps you would take, and the expected outcomes. Include a sample graph.
Fill‑in‑the‑Blank: 1. case study, 2. Phishing, 3. Corporate intelligence, 4. dark web, 5. Social media investigation, 6. Cyber threat intelligence, 7. final project, 8. Documentation, 9. Presentation, 10. Reflection.
True/False: 1F, 2T, 3F, 4T, 5F, 6T, 7F, 8T, 9T, 10F.
Multiple Choice: 1B, 2B, 3B, 4B, 5B, 6A, 7A, 8A, 9A, 10A, 11A, 12A, 13B, 14A, 15A.
You have completed the Certified Maltego User course! You are now ready to use Maltego in real-world investigations.
Here are some ideas for what to do next:
Congratulations, Certified Maltego User! The world of investigations is waiting for you!