Guest Author Twitter: @Sp4mSec
Original Artwork by Wepepe
I am the most brilliant entrepreneur in the land, when I can remember who I am talking to, and what they want⦠šļø
Greetings. My name is Reginald Hazit, and I am a level 1 Artificer in a game of Dungeons and Dragons. I make fantastic potions, fabulous inventions and bizarre contraptions. Iām accustomed to getting run out of towns because authorities do not appreciate my revolutionary and disruptive pop-up dispensary of snake-oil, hair-growth potions, and toilet hooch.
After several days on a rough carriage ride, I find myself in the backwater country of Barovia, a place haunted by monsters and ruled over by a malevolent Vampire, where death is far from the worst thing that can happen to a brilliant person like myself. The people here are poor, and itās my mission to take what little money they have, and make it mine. As if that wasnāt difficult enough, my carriage driver refuses to enter the country, and abandons me with a troupe of nomadic Vistani and their fortune-telling matriarch, Madam Eva.
Before Iāve even managed to sell tonic for her thinning hair, Madam Ava pulls six fortune cards, gives us 3 quests, drops the names of 3 treasures, and tells us we should start by finding a dusk-elf thatās having bad dreams.
Thatās a lot of information to keep track of, and now itās bed time. My group wonāt be meeting up to play Dungeons and Dragons for another 2 weeks, which is more than enough time to forget how important it is that I sell hair tonic. Fortunately, Iāve been using Maltego to keep track of everything.
What is Dungeons and Dragons? šļø
If youāve never played before, Table Top Role-Playing Games (like Dungeons and Dragons) tend to be equal parts board-game, adventure novel, and improv-theater. There are a lot of characters, locations, treasure and story to discover, but unlike a computer game, there is seldom a defined path or required choices to make. You are free to narrate your characterās words and choices as you see fit.
Unfortunately, that also means that if you forget that someone, something, or someplace exists, you may forget to engage with that part of the world and maybe miss out on fun treasure or clues. Thatās why taking good notes is important, and when it comes to taking good notes about a complex situation, Iāve never found a tool better than Maltego.
Pro Tip: TTRPGs are commonly played around a table or online with the help of video chat and a shared white board of a virtual tabletop application. Although Maltego does include real-time collaboration features, itās intended to supplement a tabletop experience, not replace it.
Exploring Dungeon & Dragons Adventures with Maltego šļø
When Iām not pretending to sell pretend potions, my name is Daniel, and I am a Cyber Security Analyst. During my day-job, I perform cyber-security investigations and use Maltego (a free for personal use cyber and criminal investigation tool), to create a graphical representation of my research leads, forensic artifacts, and indicators of compromise. It turns out that tools made for real criminal investigations also work great for fictitious ones!
At a basic level, Maltego works like a mind map. You can add icons (Entities) with embedded annotations, and draw relationship arrows (Links) between them. This is what my notes (Graphs) looks like after our first game.
Pro Tip: Maltegoās most powerful feature is its built-in and custom scripts (Transforms) that can help an investigator rapidly search common data sources for a specific piece of information. However, for our purposes, Transforms will not be used.
This style of information collection works great for search and rapid-recall because youāre looking at a graphical representation of your data. You can use images, color, line weight and style, physical position, and descriptive relationships to record and recall the info you need, as well as the tried and true Ctrl+F to Find anything written in the entities themselves.
To focus on the types of information critical to a Dungeons and Dragons game, I created a set of Custom Entities that can be imported into Maltego.
Using Dungeon and Dragons Entities in Maltego šļø
Games like Dungeons and Dragons are run by a Dungeon Master (DM), who is the āhostā of a game. They describe the locations, play the role of all the characters in the world (except the players themselves), and serve as a judge regarding rule enforcement and conflict resolution. The DM may be working out of a book that describes the world, characters, treasures, and conflicts of the fictional world, or they may have written their own story.
Back in Barovia, my DM, speaking as Madame Eva, gives us four Quests, wherein she tells us of mysterious locations, unspeakable dangers, and valuable treasures. One of those treasures is āThe Sword of Sunlight,ā which will (allegedly) help us defeat āour enemy.ā
I know Iām not going to remember any of this in 2 weeks, so I start taking notes in Maltego. By the way, it seems totally unreasonable that I would have an enemy already, especially since I havenāt sold any toilet hooch yet.
The Entities in the Dungeons and Dragons entity set are arranged in 5 groups: Character Entities, Information Entities, Location Entities, Items Entities, and Danger Entities.
Character Entities for Dungeons and Dragons šļø
Character Entities represent the people (human, demi-human, and non-human) that you meet during your adventure. If itās someone you can talk to, theyāre a character.
I think Madame Eva is going to be an important character in the story, so I want to make sure she gets an Entity. Assuming Madame Eva is a spiritual sort of person, I choose the Character (Priest) Entity from the Entity Palette.
Information Entities for Dungeons and Dragons šļø
Information Entities represent important data or tasks that you want to remember.
I drop a Note Entity down that represents the Tarokka card Madame Eva drew: Beast. I write down everything she said, so I can split it up into more Entities as needed.
āSeek a weapon of Vengeance,ā this sounds like a Quest. I place an appropriately titled Quest Entity.
Location Entities for Dungeons and Dragons šļø
Location Entities represent places that are relevant to the story.
āAn Evil Tree atop a Hill of Gravesā is a location. I donāt know where in Barovia that could be, but with this Entity on my graph, it will stay fresh in my mind.
I place the Location (Wilderness) Entity on the map, and I click and drag to draw a relationship Link from my Quest Entity to the Location Entity. I label that relationship āinvestigate.ā
Item Entities for Dungeons and Dragons šļø
Item Entities represent objects in the world that are important to the story.
āRavens will guide youā this is an important detail that I donāt want to forget. I place a Beast Entity on the graph, and link it to the Location (Wilderness) Entity, with the label āwill guide usā
While Iām at it, finding those ravens sounds like a part of the Quest, so Iāll draw a relationship from the Quest Entity to the Beast Entity, with the label āseek.ā
Finally, this quest is about obtaining a āWeapon of Vengeance,ā which Madame Eva described as āThe Sword of Sunlight,ā so Iāll add that to the graph as well. This sword could be described as both magical and an artifact, so there are several entities that I could choose, but I will choose Weapon Entity since thatās got a nice sword icon.
Pro Tip: All Dungeons and Dragons Maltego entities were designed with identical properties. Any entity can be used for any type of information, as long as it makes sense to you.
Danger Entities for Dungeon and Dragons šļø
Danger Entities represent challenges, hazards, monsters⦠anything that can get in between your characters and their goals.
At this time, we donāt know about any specific dangers associated with this quest, so I donāt have any Danger Entities to place. However, that is likely to change as we learn about this Quest, and the Entities involved.
Enriching Your Entity Properties with Other Information šļø
All Dungeons and Dragons Maltego Entities have optional properties can provide additional at-a-glance information for the Entities on your graph. These Properties, once filled in, will appear as custom Entity overlays.
Reginald Hazit listens to Madame Eva. He believes freewill can overcome prophecy, but you cannot deny magic is real, and (as of yet) there are forces beyond our command. He commits her words to memory. Madame Eva continues to draw Tarokka cards. She tells us about new locations, about the people we may meet there, the dangers they conceal, and treasures that tempt us forward.
As sheās talking, I add additional Entities to my graph. New Quest. New Location. New Item. Danger. Itās simple, and I can do it in real-time, without missing my own opportunity to play.
Start Using Maltego for Your D&D Games (And Start Playing D&D If You Havenāt!) šļø
Using Maltego for Dungeons and Dragons, and other TTRPGs has several significant benefits.
- Itās simple to find the data Iām looking for, allowing me to immediately find my notes about a location, treasure, character, or anything.
- Itās easy to update. Information is categorized by Entity not chronologically. When new information is added about a subject, itās simple to add the data to the graph in a way that makes it easy to find.
- Taking these notes keeps me engaged with the story, the characters and the world, even when other players are taking their turns.
- It helps my friends and I remember what weāve learned about, and what we should investigate further.
- It gives the Dungeon Master a way to check in with what the players know and donāt know, allowing the DM to compensate for clues that may have been missed.
Iāll continue to use Maltego to track our progress through Barovia, and Iāll keep you updated as we go!
Donāt forget to follow Maltego on Twitter and LinkedIn or subscribe to the email newsletter to stay on top of new use cases, tutorials, and releases.
About The Author šļø
Daniel āSp4mā Weishoff (@Sp4mSec)
Daniel āSp4mā Weishoff is a father, game designer, educator, and a cyber security analyst. Heās passionate about play, obsessive about objective data, and is always looking for something new to learn about. Heās got some letters after his name that donāt mean anything important, and heās worked in a few fancy places, like Riot Games and the RAND Corporation.