Maltego - DomainTools Technical Documentation

Skip to content

DomainTools Technical Documentation

Maltego

Initializing search

DomainTools Technical Documentation

Home
Developer Resources
LLM Resources
Python SDK
Python SDK
Products
Products
- Iris
  Iris
  - Iris Investigate
    
    Iris Investigate
    
    Core Concepts
    
    Search
    
    Search
    
    Basic Search
    
    Advanced Search
    
    Flexible Search
    
    Search Reference
    
    Pivot Engine
    
    Pivot Engine
    
    Pivoting
    
    Guided Pivots
    
    Historical Pivots
    
    Investigations
    
    Investigations
    
    Search History
    
    Collaboration
    
    Data Panels
    
    Data Panels
    
    Domain Profile
    
    Domain History
    
    Passive DNS
    
    WHOIS History
    
    SSL Profile
    
    Screenshot History
    
    IP Panels
    
    Stats
    
    Visualization
    
    RDAP Support
    
    RDAP Support
    
    RDAP in Search
    
    RDAP in Pivots
    
    Reference
    Reference
    
    Settings
    
    URL Linking
    
    Pivot Engine Fields
    
    SSL Collection
    
    Quotas
    
    IrisQL
  - Iris Detect
    
    Iris Detect
    
    Core Concepts
    
    Monitors
    
    Working with Domains
    
    API Usage
    
    Reference
  - API Documentation
    
    API Documentation
    
    Getting Started
    Getting Started
    
    Iris API Authentication
    
    Iris API Account Information
    
    Iris API Error Codes
    
    Iris Rate Limits
    
    Iris Detect API
    
    Iris Enrich API
    
    Iris Investigate API
    
    Iris Investigate API
    
    Quick Start
    
    Concepts
    
    Concepts
    
    Guided Pivots
    
    Pagination
    
    Quota Consumption
    
    Search
    
    Search
    
    Base Parameters
    
    Filter Parameters
    
    RDAP & WHOIS
    
    How-To Guides
    How-To Guides
    
    Monitor Domains
    
    Retrieve Screenshots
    
    Work with Tags
    
    Integrate UI
    
    IrisQL
    
    Developer Tools
    Developer Tools
    
    Iris OpenAPI Spec
    
    Iris on Swagger API Hub
- Threat Feeds
  Threat Feeds
  - API reference and resources
  - Predictive Risk Feeds
    Predictive Risk Feeds
    
    Domain Hotlist
    
    Domain Risk
    
    IP Hotlist
    
    IP Risk
  - Discovery Feeds
    Discovery Feeds
    
    Newly Active Domains (NAD)
    
    Newly Observed Domains (NOD)
    
    Newly Observed Hostnames (NOH)
    
    Domain Discovery
    
    Parsed Domain RDAP
    
    5-Minute Domain WHOIS
    
    5-Minute IP WHOIS
- DNSDB
  DNSDB
  - Scout
    
    Scout
    
    User Guide
    
    Glossary
    
    Tutorials
    Tutorials
    
    Pivot Tutorials
    
    API Endpoints Tutorial
    
    Flexible Search
    
    Installation
    Installation
    
    Overview
    
    CentOS
    
    Debian
    
    Ubuntu
  - API Documentation
    
    API Documentation
    
    Getting Started
    Getting Started
    
    Authentication
    
    Service Limits and Quotas
    
    Core Methods
    Core Methods
    
    RRset Lookups
    
    Rdata Lookups
    
    Summarize
    
    Query Parameters
    
    Query Parameters
    
    Time-Fencing Query Parameters
    
    Other Query Parameters
    
    Reference
    Reference
    
    DNSDB Streaming API Framing Protocol
    
    HTTP Response Codes
    
    DNSDB OpenAPI Specification
    
    API v2 (Deprecated Doc)
    
    API v1 (Legacy)
    
    User Guide & FAQ
    User Guide & FAQ
    
    DNSDB API User Guide
    
    DNSDB FAQ
    
    Advanced Features
    Advanced Features
    
    DNSDB Flex Search API Guide
    
    DNSDB Export
    
    DNSDB Export
    
    DNSDB Export User Guide
    
    DNSDB Export Requirements
    
    GitHub Repositories
    
    CLI Tools
    
    CLI Tools
    
    DNSDBQ (Query Tool) Guide
    
    DNSDB Flexible Search Query Tool Reference
    
    Glob
    
    DNSDB Search with Compatible Regular Expressions
    
    DNSDB Search Time Fencing
    
    Tutorials
    Tutorials
    
    DNSDB Blocklist (DNSBL) Tutorial
- SIE
  SIE
  - Getting Started
    Getting Started
    
    SIE User Guide
    
    SIE Batch OpenAPI Specification
  - SIE Batch
    
    SIE Batch
    
    SIE Batch User Guide
    
    SIE Batch API Reference
  - SIE Remote Access
    
    SIE Remote Access
    
    AXA Toolkit
    AXA Toolkit
    
    SIE AXA Technical Overview
    
    SIE AXA User Guide
    
    SIE AXA: The Missing Manual
    
    SIE AXA Accounting
    
    Migration Guide (PDF)
    
    SIE Remote Access (AXA) Tutorials and other Guides
    
    SIE Advanced Exchange Access (AXA) C Programming API
    
    SIE Batch API reference in redoc
    
    SIE NMSG User Guide
  - Channel Guides
    Channel Guides
    
    SIE Newly Observed Domains (NOD) User Guide
  - Tools & Resources
    Tools & Resources
    
    SIE Tools in GitHub
    
    SIE and NMSG Tutorial Blog Posts
- Lookup & Monitor
  Lookup & Monitor
  - Guides
    
    Guides
    
    Domain Search
    
    Monitors
    
    WHOIS
    
    WHOIS History
  - API Documentation
    
    API Documentation
    
    Lookup & Monitor API Reference in ReDoc
    
    Lookup & Monitor Authentication
    
    Lookup & Monitor API Error Codes
    
    Lookup APIs
    Lookup APIs
    
    Domain History API
    
    Domain Profile API
    
    Domain Reputation API
    
    Domain Risk Score API
    
    Domain Search API
    
    Hosting History API
    
    Parsed Domain RDAP API
    
    Parsed WHOIS API
    
    Reverse IP API
    
    Reverse IP WHOIS API
    
    Reverse Name Server API
    
    Reverse WHOIS API
    
    WHOIS History API
    
    WHOIS Lookup API
    
    Monitor APIs
    Monitor APIs
    
    Brand Monitor API
    
    IP Monitor API
    
    IP Registrant Monitor API
    
    Name Server Monitor API
    
    Registrant Monitor API
    
    Lookup & Monitor OpenAPI Specification
- Risk Score
  Risk Score
  - Domain Risk Score
- Threat Feeds (legacy docs)
  Threat Feeds (legacy docs)
Integrations
Integrations
- Anomali
- Chronicle
  Chronicle
- CrowdStrike
- Elastic
  Elastic
  - DomainTools App
  - Threat Feeds
- IBM QRadar
  IBM QRadar
- Maltego
  Maltego
- Microsoft Sentinel
  Microsoft Sentinel
- MISP
- Playbooks
- Palo Alto Networks
  Palo Alto Networks
  - Cortex XSIAM
  - Cortex XSOAR
- ServiceNow
  ServiceNow
- Splunk
  Splunk
  - Enterprise & Cloud
    
    Enterprise & Cloud
    
    Installation guide
    
    Configuration
    Configuration
    
    Base configuration
    
    Advanced features configuration
    
    Dashboards
    
    Investigation Tools
    
    Reference
    Reference
    
    Custom search commands
    
    Configuration tables and troubleshooting
  - SOAR
    
    SOAR
    
    Configuration
    
    Actions Reference
- TheHive & Cortex
- ThreatQ
- Tines
User Management
User Management
- Group Management for Enterprise Accounts
- Single Sign-On (SSO) Management for Enterprise Accounts
Changelog
DomainTools.com

Maltego¶

Please select a subcategory in the navigation column.

In this section

Maltego: Iris Transforms
Maltego: DNSDB Transforms Tutorial
Maltego: Transforms Technical Reference

Copyright © 2026 DomainTools LLC

Privacy Policy | Terms of Service | Contact Support

Data collection notice

We request your consent to track your visit with Google Analytics and 6sense—we use the data to prioritize doc improvements and understand our traffic. Our servers always log basic visitor data for operational purposes. Consult our Privacy Policy for more information.

Google Analytics
6sense Tracking