mozilla / mig

Distributed & real time digital forensics at the speed of the cloud

Home Page:http://mig.mozilla.org/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Edit and list investigators

kpcyrd opened this issue · comments

I noticed the following features are missing:

  • it's not possible to list active investigators without querying the database
  • it's not possible to update the pgp key. This is currently needed because of #190, as everybody is generating a mig specific keypair as a workaround.

Especially the fact that the publickey can not be edited was a painful experience since my python script that generated the postgres query for bytea had a bug and inserted an invalid key which locked out everybody.

I'm currently deleting investigators using SQL and then recreate them using mig-console.

>>> "E'\\x" + (''.join([hex(ord(x))[2:].zfill(2) for x in k])) + "'"

mig=# update investigators set publickey = E'\x2d2d2d2d2dSNIP2d2d2d2d2d0a', pgpfingerprint = '5A8XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXDF' where id = 4;
UPDATE 1
mig=# 

@kpcyrd you should be able to search investigators using the "search investigator" command in mig-console.

Yeah to edit the pubkey, that feature isn't present and doing it in the database is currently the only way so support would need to be added.