Lion Cipher Lab

Map relationships with Maltego (link analysis for OSINT)

Why it matters

Intelligence work is rarely about one fact — it is about how facts connect. A domain leads to name servers, which lead to other domains, which lead to email addresses, which lead to people. Maltego turns that web of relationships into a picture you can actually reason about, and it is a staple in real threat-intel and OSINT teams. Learning to build a graph — and to do it ethically, against targets you're allowed to touch — is a core analyst skill.

What you'll learn

Steps in this lab

  1. What link analysis is, and when you'd reach for it
  2. The one rule before you touch a keyboard: only your own turf
  3. Install Maltego Community Edition and register
  4. Create a graph and drop your first entity
  5. Run your first transforms — let the graph grow
  6. Read the picture: what the graph is telling you
  7. When Maltego is the wrong tool (and the honest limits of CE)

Open the full interactive lab →