New and updated
- When specifying multiple evidence sources in an AUTOMATE case, you can now choose whether or not to merge the evidence sources. By choosing to not merge evidence sources, an AXIOM case is created for each evidence source, providing more granular organization of the evidence sources in an AUTOMATE case. Previously, when specifying multiple evidence sources in an AUTOMATE case, you were required to merge the evidence sources, creating a combined AXIOM case containing all evidence sources (as well as creating an AXIOM case for each evidence source).
- To offer more flexibility in creating workflows that meet your organization's needs, you can now use a custom process element or custom node application instead of an AXIOM Process element in merge workflows. For example, you can use a PowerShell script or workflow plugin as the custom process element that calls the AXIOMProcess.CLI.exe in your merge workflow. This functionality is available from the workflow builder and Magnet AUTOMATE REST API. Previously, an AXIOM Process element was required in merge workflows.
Note: To successfully perform the merge step in a merge workflow, an AXIOM MFDB case file must be present.
- To more easily create multiple cases, you can now submit a case and then create another one from the Create new case page. Once a case is submitted, it's immediately added to the AUTOMATE queue for processing. Previously, you could only submit one case at a time and were required to navigate back to the Cases dashboard to create another case.
- The option to view all run details from the run summary is no longer available.
Bug fixes
- When viewing a run summary from the Completed, In Progress, or Pending tables, navigating to another page in the table displayed incomplete case information instead of closing the run summary. (AU-708)
- When using Atola TaskForce as a hardware imager with a variable in the output path for the imaged drive, the workflow failed. (AU-670)
- When using Atola TaskForce as a hardware imager with a password protected output path (with or without a domain name), the workflow failed, displaying an invalid path and/or credentials error. (AU-276)
- If folders in a node workspace contained spaces, any merge workflows failed. (AU-178)
Known issues
- Long lines in log files may fail to wrap correctly, causing them to overlap with other lines. To resolve the issue, refresh the log you are viewing. -AU-699
- In an image processing workflow, AXIOM Process cannot read an iOS image with a keychain encrypted by BitLocker. To successfully read and process this type of image, copy the keychain to an external drive not encrypted with BitLocker. Additionally, if the AUTOMATE agent node's workspace is encrypted with BitLocker, workflows that have been configured to "turn on local image mode" will not be able to read these images. -AXP-10310
- During data validation, if the source destination contains an image with copies of the same image in subfolders, the data validation fails. In this scenario, the expected behavior is that Magnet AUTOMATE doesn't recursively catalog identical files. -AUTO-3407
- When copying files during data validation, the associated node is in use; however, the Nodes column for cases in progress appears empty. The expected behavior is that the Nodes column should display the active node. -AUTO-3406
- When data validation begins, the workflow run log records a "Creating hash catalog" status. If files fail to copy after creating file hashes, there is no status in the workflow run log to indicate when copying started. The expected behavior is that there should be a "Copying" status after "Creating hash catalog" to indicate the sequence of events and when they occurred. -AUTO-3408
Magnet AXIOM and Magnet AXIOM Cyber updates
- No updates to agent installers, which include the following workflow applications: AXIOM Process, AXIOM Exporter, AXIOM Post-Processing, and Magnet ACQUIRE.
- For more information about Magnet AXIOM 7.2 updates, see the Magnet AXIOM 7.2 Release Notes.
- For more information about Magnet AXIOM Cyber 7.2 updates, see the Magnet AXIOM Cyber 7.2 Release Notes.