OSINT NavigatorDE Deutsch

Maltego Evidence

Operator: Maltego Technologies GmbH, Germany

Preserves social media data in cases and analyses profiles, posts, media and connections.

Social Media (SOCMINT)

Open website

Product

Maltego Evidence: Desktop Base, Desktop Full and Collaboration. A separate product for social media collection, analysis and evidence preservation.

Availability and source date

Active

As of: 17 October 2026.

No functionality test has been performed.

Use in OSINT research

Collects social media data by case and retains captured content for search, network analysis and reporting. Documented sources include Facebook, Instagram, X, TikTok, LinkedIn, YouTube, Telegram, VKontakte and Odnoklassniki.

Queries

InputResultResult type
URLCaptured content from a supported profile or post, including the selected contacts, comments and media.
Retrieved
Username / aliasPreviously stored target profiles in accessible projects that match the username.
Retrieved
Platform user IDPreviously stored target profiles in accessible projects with the matching network ID.
Retrieved
Document / fileSNH Classic/SNH2 project data or UFED report files imported into a case.
Retrieved

Features

  • Collects profiles, posts, comments, contacts, media and chats from multiple social networks in one project.
  • Saves full profile views as PNG or PDF and displays earlier object versions and their changes.
  • Searches and filters captured data, and visualises contacts, reactions and comments in network graphs.
  • Manages cases with a case number, description, tags and notes. Collaboration supports shared cases on the organisation’s servers.
  • Exports formats including XLSX, CSV, GraphML and media files. Full and Collaboration create PDF reports and portable offline cases.
  • Processes multiple collection tasks. Desktop Base has one runner; Desktop Full has three parallel runners.

Categories

  • Social Media (SOCMINT)
  • Multi-platform

Coverage

Dataset

Social media data collected by the user from supported networks. Captures are stored on the user’s PC or in the organisation’s Collaboration infrastructure.

Access

Installation and deployment

Locally installable · Self-hosted · Browser extension

Desktop Base and Full store data locally on a Windows PC. Collaboration runs in a browser on the organisation’s infrastructure. The optional browser extension sends collection tasks to Evidence.

Requirements

A separate Evidence licence and source accounts for collection. Desktop runs on 64-bit Windows 10/11; 32 GB RAM and a 2 TB SSD are recommended. Collaboration requires deployment in the organisation’s infrastructure.

Export

XLSX, CSV and GraphML; profile views as PNG/PDF; original media files and the SNH2 exchange format. Full/Collaboration: PDF Report Builder and Portable Case as a ZIP containing an HTML file for offline viewing.

Provider

Maltego Technologies GmbH

Country of establishment

Germany

Interfaces

No API, MCP or AI integration is documented.

Limitations

  • Collection uses the user’s platform accounts and the content they can access. Source modules and platform changes affect the available data.
  • For new licences purchased from 1 February 2026, Report Builder, Portable Case and Analytics are restricted to Desktop Full and Collaboration.
  • The SNH2 exchange format includes project files and media, but excludes reports and Analytics pages.

Guides and practical reports

Sources

Report an error