Release Notes

Magnet REVIEW 5.2.193 Sep 25, 2023

Installation and upgrade notes

• Kubernetes version:
  • Azure deployments: 1.24 to 1.26
  • AWS deployments: 1.24
  • On-premises instances (installed by the installer): 1.24
• To avoid case ingestion errors, you must use the 5.2 CLI. To manually replace the installed CLI, follow the instructions in the Support Portal article Update the CLI used to upload evidence from AXIOM Examine to Magnet REVIEW.
• For versions of AXIOM EXAMINE prior to 7.4, you must manually replace the Magnet REVIEW CLI.
• You must run the CLI or the Upload to Magnet REVIEW tool from a machine running Windows 8 or later.
• All users should log out and in from their browser sessions after the upgrade.

New and updated features for end users

• Artifact icons now appear next to AXIOM artifacts in the artifacts list and in the artifact explorer table.
• As a legal reviewer, you can now tag and untag evidence items.
• Case members can now add case tags.
• Case tags can now be created from the details page.
• You can now add a case tag while bulk tagging evidence.
• In the global filter, you can now filter evidence using a comments filter and return items that have public comments applied.
• Large URLs are now displayed in a more user friendly format.
• New ingestion and preview generation status messages now make it easy for you to know the status of your evidence in a case. Ingestion or preview generation status messages now appear in the case dashboard, on each case page and on the pages of affected evidence sources. On the case overview page, a generation preview message appears next to the effected evidence sources, including the number of items remaining.
• The case dashboard, case overview, and reports can now be accessed from an updated tabbed interface.
• The Details card on the evidence item details page now includes the evidence source name.
• The timezone is now configured at the case level.
• When assigning users to a case, you can now search for user names.
• You can now use the Mark as Privileged option while bulk tagging evidence.

New and updated features for administrative users

• The CLI now indicates when the ingestion is complete.

Fixed issues

• Due to timeout errors, video previews fail to generate for large FLV files.
• Previously, column filters couldn't be applied to the multi-artifact view, when several details had a mavOrder value. -RE-3658
• Previously, HEIF files were not supported. -RE-960
• Previously, the MIME type audio/m4a was not supported. -RE-852
• Previously, when a case filter was applied, evidence source audit entries would not appear. -RE-2445
• Sometimes, filmstrips would only render the first panel. -RE-3381
• When the user's timezone was offset from UTC, the date/time filter would not apply to the correct date and time. -RE-2848
• When users uploaded a case, occasionally the following error message was recorded in the log file: "Retrying message in "00:05:00 with path : Connection timed out". -RE-2354
• Thumbnails and previews don't display for SVG images.
• Sometimes when an evidence source was deleted, not all of the associated items were deleted.
• Sometimes after editing a case, evidence source, or tag from the network tab, the wrong item was being updated and displayed.
• API users were able change passwords for any user regardless of set permissions.

Known issues

• During an upgrade on Azure, the installer prints this warning even when the upgrade is successful: Unexpected error while verifying MySQL credentials: Connections using insecure transport are prohibited while --require_secure_transport=ON."
• If Magnet REVIEW is installed on AWS using an EKS public load balancer, users receive an ERR_CONNECTION_TIMED_OUT response when they attempt to access the Magnet REVIEW UI.
  Workaround: Register Magnet REVIEW nodes on the load target groups, then add the target group ports to the cluster security group.
• In Azure and AWS environments, attachments larger than 5 GB fail to upload, resulting in an "Error while copying content to a stream" message.
• Occasionally, PDF reports may fail to generate when previews are included and the case contains one or more large video attachments.
• When deploying on AWS environments, custom and default logo uploads fail.
• When upgrading an Azure airgapped environment, the answers supplied for the installer prompts during the previous installation are not shown.
• For instances that have a configured Keycloak AD FS integration via SAML, the Manage users page shows "No" in the Active Directory column instead of "Yes".
• During an upgrade, the installer should not give the admin user the option to select a different primary storage type from that used in the instance. If this happens, the upgrade fails, and it will rollback and existing cluster data remains intact.
• An attempt to generate a system report will fail if there's a case that does not have a hits index (likely due to an issue with ingestion).
  Workaround: Find a case on the Dashboard that has "no evidence sources", then delete the case.
• In evidence uploaded from Cellebrite Physical Analyzer, duplicate artifact fragments can be generated if an XML element from the Cellebrite export contains a nested element of the same type.
• Keyword searches applied by the user don't get highlighted in PDF previews if the content exists in the table of contents, links, or occurs over multiple lines.
• Switching to full-screen view in a document preview sometimes causes some UI elements to resize off the screen. This occurs most frequently with larger documents.
• SVG images cannot be previewed in full-screen.
• On rare occasions, when there is significant memory pressure during preview generation for an evidence source, the generation may stall, but the system will report that preview generation is still in progress. If this occurs, remove the evidence item and upload it again.