New and updated

To decrypt application data in iOS devices, you can now specify a keychain file during case creation.
To check your license when using the CLI for Magnet.CaseMerger.exe, RunJob.exe, or Magnet.Automate.Decryption.Cli.exe, you can now specify the protocol, IP address, and port number of the licensing server. Previously, you could only specify the port number for a hardcoded localhost address. With this release, the -p/--Port and -c/--communicationPort options are deprecated and the new -lsa/--LicenseServerAddress option should be used instead.
To improve the visibility of CLI information in workflow elements, the default size of the CLI parameters field has been increased.

Bug fixes

Running a localized workflow with a hardware imager always runs from the agent, not the controller. -AUTO-3442
After the successful submission of a remote acquisition workflow, the custom targeted location form does not clear the previous values. -AUTO-3181
Cannot set a service account in the user interface over HTTPS. -AUTO-2115
Running a workflow with an Atola TaskForce hardware imager over HTTPS fails. -AUTO-3349
When editing an AXIOM Process workflow element with a hash list over HTTPS, the Media categorization hash sets details are hidden. -AUTO-2032
In a localized workflow with local image copy enabled, the stop vertex skips the source location update after processing the local image, causing subsequent exporter steps in the workflow to fail. -AUTO-3441
Cannot save a workflow after adding the ${PREV_OUTPUT_PATH} variable to a text field in a workflow plugin element. -AUTO-3412
In a remote acquisition workflow with a custom targeted location, updating the custom targeted location does not display an error message if any of the workflows fail to update. -AUTO-3230

Known issues

In an image processing workflow, AXIOM Process cannot read an iOS image with a keychain encrypted by BitLocker. To successfully read and process this type of image, copy the keychain to an external drive not encrypted with BitLocker. Additionally, if the AUTOMATE agent node's workspace is encrypted with BitLocker, workflows that have been configured to "turn on local image mode" will not be able to read these images. -AXP-10310
During data validation, if the source destination contains an image with copies of the same image in subfolders, the data validation fails. The expected behavior is that during a local image copy that targets a single file, Magnet AUTOMATE shouldn't recursively catalog identical files. -AUTO-3407
When copying files during data validation, the associated node is in use; however, the Nodes column for in progress cases appears empty. The expected behavior is that the Nodes column should display the active node. -AUTO-3406
When data validation begins, the workflow run log records a "Creating hash catalog" status. If files fail to copy after creating file hashes, there is no status in the workflow run log to indicate when copying started. The expected behavior is that there should be a "Copying" status after "Creating hash catalog" to indicate the sequence of events and when they occurred. -AUTO-3408

Magnet AXIOM Cyber updates

Updated agent installers to include the latest version of workflow applications: AXIOM Process, AXIOM Exporter, AXIOM Post-Processing, and Magnet ACQUIRE.
When processing an evidence source using the AXIOM Process CLI, you can now filter resulting artifact hits by date and time (all items within a date range, all items after a date, or all items up to date). You can also include artifact hits without time stamps. For example, if you have authority to search a mobile device image, but the warrant specifies that only evidence within a certain date range is admissible, you can specify a date range to filter the artifact hits as a portable case for further examination in AXIOM Examine. These options are currently unavailable from the workflow builder user interface.
Added support for Firefox browser options with the AXIOM Process CLI. For example, you can specify a password with the AXIOM Process CLI to decrypt saved login data in a user's Firefox browser. These options are currently unavailable from the workflow builder user interface.
Added support for Yahoo! Messenger options with the AXIOM Process CLI. For example, you can specify a username with the AXIOM Process CLI to decrypt and uncover deleted chat logs in the Yahoo! Messenger instant messaging client. These options are currently unavailable from the workflow builder user interface.
Added support for KakaoTalk options with the AXIOM Process CLI. For example, you can specify a user ID with the AXIOM Process CLI to decrypt data in the KakaoTalk messaging app. These options are currently unavailable from the workflow builder user interface.
For more information about Magnet AXIOM Cyber 6.8 updates, see the Magnet AXIOM 6.8 Release Notes.