Release Notes - Standard Transforms Add-on (CTAS) Server

Version 3.3.0 - Standard Transforms Add-on (CTAS) Server

Release date: 22 May 2025

The 3.3.0 release of the Maltego Standard Transforms Add-on (CTAS) Server introduces support for the v3 (JSON) Transform Protocol. This update ensures compatibility with the latest Maltego transform assets, including machines, icons, and transform sets. The release also includes new integrations, security fixes, and key library updates.

Added

Transforms

• OpenCNAM

• IBM Watson

• DNS Lookup

• Bing Search

• Standard Property Transforms

• Maltego Training & Onboarding

Note: the following services require API keys: OpenCNAM, IBM Watson, Bing Search, IPQS, Security Trails, WhoisXML, and BuiltWith. Configuration details can be found in the API Keys section.

Entities

• Standard Entities have been added.

Updated

Protocol Support

• All transform servers now support the v3 (JSON) Transform Protocol.

Server Components

• Django has been upgraded from version 4.1.7 to 4.2.20.

• Gunicorn has been upgraded from version 20.1.0 to 23.0.0.

• pyOpenSSL has been upgraded from version 23.0.0 to 24.0.0.

Fixed

• Deprecated usage of OpenSSL.crypto has been addressed following the update to pyOpenSSL 24.0.0.

• Security vulnerabilities have been resolved through dependency updates.

Version 3.2.0 - Standard Transforms Add-on (CTAS) Server

Release date: 27 March 2023

Welcome to the 3.2.0 Release of our Maltego Standard Transforms Add-on (CTAS) Server. Some of the key highlights include:

Added

Transforms

• IPQS Transforms. 
• MST Security Trails Transforms. 
• WHOISXML IP Netblock Transforms. 
• Shodan Internet DB Transforms 

Note: IPQS, Security Trails, WhoisXML, and IP Netblocks all require API Keys. Please refer to the API Keys section here.

Entities 

• Standard Entities

Removed

Transforms 

• FlickrAccountGetFriends  
• toAliasFromTwitterAccount  
• AffTwitterToLocation  
• AffTwitterToPerson   
• toSitesIdentifier  
• WebsiteToWebsite_Thumb 
• Robtex Transforms
  • ASNumberToCompany 
  • ASNumberToNetblocks 
  • DomainToDomain_TLD 
  • IPAddressToDNSName_SharedIP 
  • IPAddressToDomain_SharedMX 
  • IPAddressToDomain_SharedNS 
  • IPAddressToNetblock_NS4block 
  • IPAddressToNetblock_SS 
  • MXRecordToDomain_SharedMX 
  • NetblockToAS_SS 
  • NetblockToDNSName_SS 
  • NSrecordToDomain_SharedNS 
  • NSrecordToNetblock_NS4block

Updates to Machines

• Company Stalker 
  • Removed Email To Flickr Account Transform 
  • Removed Email To My Space Account Transform 
• Person - Email Address 
  • Removed Person to Email Address Common Transform 
• URL To Network and Domain Information 
  • Removed Netblock to AS Transform

Removed Machines

• Footprint L1
• Footprint L2
• Footprint L3
• Footprint XXL 

Updated

Transforms

• All related application dependencies.
• Updated Paterva references to Maltego Technologies 
• All Transforms updated with an onprem namespace and [On Premise] display prefix. Refer to the Screenshots section.  
• DNS To IP Address [DNS] Transform return IPv6 addresses.

Machines 

• All Machines have been updated with an "onprem" namespace and [On Premise] display prefix. Refer to Screenshots section.  

Server Components

• Django updated from 4.0.1 to 4.1.7
• Postgres updated from 10 to 13

Shared API Key Configuration

• Shared API Keys to be set in API Keys JSON file. The method of setting API keys as environment variables is no longer supported.

Fixed

• 100% CPU Usage for PGP, Wikimedia, Builtwith, MST-HTTP, MST-PROPS Transform Servers

Known Issues

• Robtex Transforms are not functional as the API is not responsive.  
• IMPORTANT: As all Transform names have been updated, custom Machines will need to be updated with the new prefix .onprem. Custom Machines with the old names will not work any longer. 

Screenshots

Figure 1 Transform Run Context 

Figure 2 Machine Manager 

Figure 3 All Transforms Listing 

Version 3.1.4 - Standard Transforms Add-on (CTAS) Server

Release date: 12 October 2022

Fixed

• Increased password length requirement to 9 characters. 
• Set cookies header includes secure attribute. 
• Frame-ancestors policy added to the CSP headers.

Version 3.1.3 - Standard Transforms Add-on (CTAS) Server

• FIXED: Issue with 100% CPU usage - replace async with on-demand logic.

Standard Transforms Add-on (CTAS) Server 3.1.3 OVA File Checksums

Version 3.1.2 - Standard Transforms Add-on (CTAS) Server

Updated

• Updated to Django 4.
• All related application dependencies.
• NGINX configuration hardened (CSP, HSTS headers added and stricter TLS requirement).

Fixed

• Issue with runner not honouring custom port.

Standard Transforms Add-on (CTAS) Server 3.1.2 OVA File Checksums

Version 3.1.0 - Standard Transforms Add-on (CTAS) Server

Added

• Moved all secrets to environmental variables that can be set from the docker-compose file.
• Decoupled Python and Nginx into separate containers to comply with best-practice of having one process per container.
• Created least-privileged user for each container to run with.
• Updated networking configuration to support K8s networking.
• Updated API key sharing mechanism so that API keys can be set from environmental variables.
• Changed the build process for registering Transforms with the dispatcher to ensure no runtime dependency issues.
• JINX PGP Transforms.
• JINX BuiltWith Transforms.
• JINX Wikipedia Transforms.

Removed

• Admin UI for configuring API keys.
• CTAS PGP Transforms.
• CTAS BuiltWith Transforms.
• CTAS Wikipedia Transforms.

Standard Transforms Add-on (CTAS) Server 3.0.X to 3.1.X OVA File Checksums