Mastering Kali Linux for Advanced Penetration Testing(Second Edition)
上QQ阅读APP看书,第一时间看更新

CaseFile

CaseFile is the little brother to Maltego. It is an offline and visual intelligence application, which can be utilized to determine the real-world links and relationships with a hundred different types of information. It gives attackers the ability to quickly view all level-order relationships and find links that are otherwise undiscoverable or overlooked.

CaseFile can also be considered as a data analysis tool that can be very efficient during forensic investigations, and can also upload custom datasets and make relationship links between them. This can visualize datasets stored in CSV, XLS, and XLSX formats. Once attackers open CaseFile, they will be able to build their own scenarios. For example, the following screenshot shows a relation between one user, John Doe, using multiple smart devices, such as PCs, mobile phones, smart phones, and laptops, to send malware using email as the medium:

How can attackers use this tool in penetration testing? It can be used for information gathering, analytics, and intelligence phases for almost all types of investigation. This can be very handy and also can be shared with multiple people.