Mobile decryption
Magnet AUTOMATE now includes built-in support for decrypting some types of mobile images.
- Image and watch folder workflows now display a password field when a supported encrypted image is detected.
- If decryption fails, you can retrigger the workflow by providing a new password.
- Added support for decrypting Android and iOS backups.
Magnet AXIOM updates
- Updated packaging to include the latest versions of workflow applications: AXIOM Process, AXIOM Exporter, AXIOM Post-Processing (Magnet AXIOM 4.3) and Magnet ACQUIRE 2.29.
- For more information about the latest Magnet AXIOM updates, see the Release Notes at www.magnetforensics.com/release-notes.
Workflow enhancements
- Large workflows that contain more than 22 elements are now supported.
- Your workflows can now include Python applications that use different versions of Python. Previously, you were restricted to using a single Python version with all your Python applications.
Bug fixes
- After updating to 2.2, the Statistics screen was not updating consistently with case data and stats accumulated before the upgrade are not maintained. -AUTO-1703
- If you didn't configure a hashset database location, an error would display in the configuration panes for AXIOM Process and AXIOM Exporter. -AUTO-984
- Workflows applications that didn't use any arguments would fail run in a workflow. -AUTO-1696
- Workflows that included applications that consumed the ${IMAGE_PATH} variable, but didn't use ${OUTPUT_PATH} (i.e. applications that don't have an output), would fail when copying to the case directory. -AUTO-1538
Known issues
- AXIOM Exporter will fail to create an output if it uses an artifact profile that includes a large number of artifacts.
- If an encrypted APFS image is added to a case for processing, the encryption is detected and a password prompt is displayed. However, decryption does not occur and the workflow continues with carving the encrypted image.
- If Magnet AUTOMATE is configured to use HTTPS but the user account that runs the master and agent services hasn't trusted the certificate, decryption will not work. Decryption does work as expected if Magnet AUTOMATE uses HTTP. For more information about adding SSL support and trusting the certificate, see the Magnet AUTOMATE User Guide.