Entities and entity fields

August 12, 2021

ID 218411

During installation of Kaspersky Transforms for Maltego, several entities are added to be used in the Maltego client. This section describes these entities and their fields.

The KL.Category entity

The fields of the KL.Category entity are described in the following table.

Fields of KL.Category

Field

Description

Category

Category name.

The KL.CertificateInfo entity

The fields of the KL.CertificateInfo entity are described in the following table.

Fields of KL.CertificateInfo

Field

Description

Vendor

Owner of the container's certificate.

ParentMd5

MD5 hash of the container's certificate.

SerialNumber

Serial number of the container's certificate.

Publisher

Publisher of the container's certificate.

TimeStamp

Date and time when the container's certificate was signed.

Issued

Date and time when the container's certificate was issued

Expires

Expiration date of the container's certificate.

IsDirectlySigned

Shows whether a container's certificate is embedded into the file.

IsDiscredited

Shows whether the container's certificate is discredited.

IsTrusted

Shows whether the container's certificate is trusted.

IsRevoked

Shows whether the container's certificate is revoked.

IsGray

Shows whether the container's certificate is in a Gray zone.

IsGood

Shows whether the container's certificate is in a Good zone.

The KL.DetectionInfo entity

The fields of the KL.DetectionInfo entity are described in the following table.

Fields of KL.DetectionInfo

Field

Description

DetectionName

Name of the detected object.

LastDetectDate

Date and time when the object was last detected by Kaspersky expert systems.

DescriptionUrl

Link to the detected object's description on Kaspersky Threat Intelligence Portal (if available).

Zone

Color of the zone that the detection object belongs to.

DetectionMethod

Method used to detect the object.

Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.