New and updated
- Using remote acquire, you can now gather evidence from Linux computers to complete targeted investigations on an as-needed basis.
- If you select Deploy the agent using a script and you haven't configured PowerShell on any nodes, you'll now see an error message and you won't be able to save the workflow.
- You can now view the Case ID in the Case summary and Case ID and Run ID in the Run summary.
- When creating a workflow, you can now collect from a list of known files and folders on the endpoint specified at case creation time.
Bug fixes
- When a pass/fail condition was configured on a workflow, the workflow would run regardless of what the results of the pass/fail condition were.
- When starting AUTOMATE workflows from the API, CLI commands did not include the full path to Artifact profiles, Export templates or Column configuration templates.
- After upgrading to AUTOMATE 3.0, any workflows that already used PowerShell as a workflow element could fail with a response "There are no nodes with the label 'ppowershell__custom_'.
Magnet AXIOM Cyber updates
- Updated agent installers to include the latest version of worklow applications: AXIOM Process, AXIOM Exporter, AXIOM Post-Processing, and Magnet ACQUIRE.
- For more information about Magnet AXIOM Cyber 5.10.0 updates, see the Magnet AXIOM Cyber 5.10.0 Release Notes.