Installation and upgrade notes
- Kubernetes version for Azure and AWS deployments: 1.24 to 1.25
For upgrades: you must upgrade Magnet REVIEW to 5.0 before you upgrade Kubernetes to 1.25.
- Kubernetes version for on-premises instances (installed by the installer): 1.24
- To avoid case ingestion errors, you must use one of the following versions of the CLI:
- To get the latest functionality, use the 5.0 CLI (recommended). This version includes the ability to ingest tags and comments from Magnet AXIOM 7.0 case exports.
- Otherwise, you can use the 4.3 CLI.
To manually replace the installed CLI, follow the instructions in the Support Portal article Update the CLI used to upload evidence from AXIOM Examine to Magnet REVIEW.
- You must run the CLI or the Upload to Magnet REVIEW tool from a machine running Windows 8 or later.
New and updated features for end users
- Extensive improvements to the user experience across all product features, including case management, artifact details, artifact navigation, and more.
- Apply and manage filters more easily using the new filter bar at the top of the evidence locker, case dashboard, artifact details, and artifact view pages.
- Explicitly include untagged items in a report.
- View and manage individual evidence sources from the Case Overview page. You can also now delete evidence sources from the Evidence source dashboard.
- Filter by date and time more precisely using the new controls.
- The breadcrumb trail now appears on all case pages and includes links to parent pages.
New and updated features for administrative users
- When Magnet REVIEW ingests a case uploaded from Magnet AXIOM 7.0 or later, it now ingests and processes any included comments and tags along with the corresponding artifacts.
- View ingestion progress on the new Grafana Ingestion details dashboard.
- The Upload to Magnet REVIEW tool is now included in the installer.
- Links for system and administrator settings are now located in the top navigation bar.
Fixed issues
- On AWS deployments, Magnet REVIEW now updates the logo used in reports when one is provided during installation. ‑RE‑1052
- When users mark an artifact (evidence item) as privileged, the next evidence item now shows, when available. ‑RE‑935
Known issues
- If Magnet REVIEW is installed on AWS using an EKS public load balancer, users receive an ERR_CONNECTION_TIMED_OUT response when they attempt to access the Magnet REVIEW UI.
Workaround: Register Magnet REVIEW nodes on the load target groups, then add the target group ports to the cluster security group.
- If the metadata for a case is changed and the user filters the audit log based on the changed data, nothing shows in the case column in the audit log entries.
- When uploading a case via the Upload to Magnet REVIEW tool, users occasionally receive the following message: "Retrying message in 00:05:00 with path : Error while copying content to a stream."
- In Azure environments, attachments larger than 5 GB fail to upload, resulting in an "Error while copying content to a stream" message.
- Due to timeout errors, video previews fail to generate for large FLV files.
- PDF reports fail to generate when previews are included and the case has one or more large video attachments.
- During an upgrade, the installer should not give the admin user the option to select a different primary storage type from that used in the instance. If this happens, the upgrade fails, and it will rollback and existing cluster data remains intact.
- An attempt to generate a system report will fail if there's a case that does not have a hits index (likely due to an issue with ingestion).
Workaround: Find a case on the Dashboard that has "no evidence sources", then delete the case.
- An issue with the Filmstrip previewer service is causing previewer pods to exceed their memory limits, which cause the pods to be terminated.
Workaround: Configure the maximum number of video requests to be 2 or less and the Filmstrip previewer pod should not get into a state where it runs out of memory.
- In evidence uploaded from Cellebrite Physical Analyzer, duplicate artifact fragments can be generated if an XML element from the Cellebrite export contains a nested element of the same type.
- Keyword searches applied by the user don't get highlighted in PDF previews if the content exists in the table of contents, links, or occurs over multiple lines.
- Switching to full-screen view in a document preview sometimes causes some UI elements to resize off the screen. This occurs most frequently with larger documents.