Maltego Evidence

Maltego Evidence is a tool that lets investigators capture and preserve vast amounts of social media data from multiple networks before it disappears. This resource provides an overview of Evidence’s core capabilities: data collection, analysis, visualization, and reporting.

If this is your first time using Maltego Evidence, please install it first by following the instructions below.

Who can access Maltego Evidence?
Maltego Evidence is only available as part of the Maltego Organization plan.
For more information about the Maltego Organization plan, see our Pricing Page.

How to download Maltego Evidence
To download Maltego Evidence, you need to download the Maltego Evidence installer.

Use the download link: https://update.txs.maltego.com/evidence/installer/Maltego-Evidence.zip.

Download the installer MSI file to install Maltego Evidence Desktop. Please use the pre-selected settings if possible.

These include the following settings:

Selected features

– Maltego Evidence
– Main Application

(Location

– C:\Program Files (x86)\Maltego Evidence\

For more information, please refer to the Installation Manual.

Installing Maltego Evidence

If you change the location mentioned in the previous step, please ensure you have the necessary access permissions for the location. In addition, Maltego Evidence should not be installed on network drives, as these could significantly negatively impact performance. If an error occurs during the installation, please report this error to our support team.

After the installation, Maltego Evidence Desktop will not start directly.

– To start Maltego Evidence Desktop for the first time, please search for Maltego Evidence in the Windows search.

– After installation, enter Maltego Evidence in the Windows search mask to open Maltego Evidence.

When you start Maltego Evidence Desktop for the first time, a loading screen will be displayed first.

Usually, the first start of Maltego Evidence Desktop will take much longer than all the others. Usually, the first start takes between 2 and 10 minutes.

Notes

If this process takes much longer than expected, please check if your system meets the minimum requirements and submit a ticket through Maltego Support Portal if necessary.
The startup speed is also significantly dependent on your internet speed.
You may be asked to allow an exception in the firewall when you start Maltego Evidence Desktop for the first time. Please accept this request. Otherwise, Maltego Evidence Desktop will not work.

Maltego Evidence Desktop initially searches for the latest versions of the following dependencies on Maltego Technologies GmbH's servers. Please grant access to our update server (https://update.txs.maltego.com/).

• MariaDB
is saved under %APPDATA%/Maltego Evidence/addins/mariadb
• Chrome
is saved under %APPDATA%/Maltego Evidence/addins/chrome
• Python
is saved under %APPDATA%/Maltego Evidence/python
• Maltego Evidence Frontend
is saved under %APPDATA%/Maltego Evidence/build/frontends
• Maltego Evidence Backend
is saved under %APPDATA%/Maltego Evidence/build/backends

The dependencies are downloaded and unpacked. This may take a few minutes.

The Maltego Evidence Desktop will then start a database server and two other servers that are essential for the correct start of the Maltego Evidence Desktop.

Virtual machines and shared systems

If you run the Maltego Evidence on a virtual machine or in a system where multiple users on the same computer can run the Maltego Evidence simultaneously, this could cause problems.

Maltego Evidence desktop is not designed to work on such systems without further configuration. If you want to set up such a system, this is still possible, but we ask you to contact our support team. They will take care of your situation. We would also like to draw your attention to Maltego Evidence Enterprise, designed for simultaneous use of Maltego Evidence with multiple users and offers several other features.

By default, the system uses ports 7109-7114.

Future starts of Maltego Evidence

For all further launches of Maltego Evidence, only those dependencies will be updated, for which an update is also available on our servers. The software will start even if you do not have access to our update servers, but we recommend providing internet access at every software start to keep possible downtimes of the Maltego Evidence Desktop low.

License and account activation

After starting Maltego Evidence for the first time, you will be prompted to activate the software using the license key provided.

There are two ways to obtain a license file:
1. Via a USB dongle that has been provided to you.
2. License keys can be directly generated by the Organization Admin on the Maltego app. Please find the admin instructions on the Admin page to read the full process.

Note: License key generation is only possible for the base version of Maltego Evidence. If you have purchased Maltego Evidence Faster Data, you can either use USB dongles or, instead of uploading your team’s hardware IDs on the Maltego app, send the hardware IDs to your Maltego contact, who will provide you with the license keys.

1 – About Maltego Evidence

2 – Home screen

3 – Adding a crawling profile

4 – Creating a project

5 – Creating a crawling task

6 – Data exploration

7 – Account linking

8 – Dashboards

9 – Analytics

10 – Import and export

11 – Reporting in Evidence

What is Maltego Evidence?

STEP-BY-STEP GUIDES

Download Maltego Evidence

Installation and activation