Nuix Workstation Release Notes
The Nuix Workstation 100.6.0 release contains new and updated features as well as resolved issues. This document provides the highlights of this release.
New features
The following new features are available in this release:
Ability to use a scripted validator for custom named entities
Cancel and resume the "Analyse with NLP" process
Enhanced support for Expert Witness Compression format (EWF)
Enhancements to Promote to Nuix Discover functionality
Highlight positive hits to entity search and entity filters
Ingest a Magnet AXIOM portable case
Nuix Imager works with Nuix Neo
Performance Improvements for Nuix Workstation
Store and process component Named Entities within Compound Lexemes as separate Named Entities
Support for Detection of Oxygen Forensic Detective Format v16
Enhancements
Updated JxBrowser to v7.36.
Added Document Title to the default Nuix Discover profile. Added support for MSAB schema 23Q3.
Enterprise Vault Connector updated to 1.0.1.0. Dramatically improved the performance of date range searches. Added support for text transcripts of Slack video and audio clips.
Added support to view and export AES256 encrypted PDF documents. Improved performance of rendering process for large text/RTF files.
Supported upgrade paths
You can upgrade Nuix Workstation version 8.0.0 or later to Nuix Workstation version 100.6. For versions earlier than Nuix Workstation version 8.0.0, you must upgrade to v8.0.0 before you upgrade to v100.6. For Nuix Workstation versions earlier than v5.0.0, contact the Nuix Support team for information before migrating your cases.
For every new release of Nuix Workstation, the Nuix Data Finder plugin is updated to work with the latest version of Nuix Workstation.
Compatible versions of Nuix Workstation and Elasticsearch are:
Nuix Workstation Version |
Supported Elasticsearch Version |
Nuix Workstation v9.0.0 and later |
Elasticsearch v7.8.1 |
Nuix Workstation v8.0.0, v8.2.0, v8.4.0, v8.6.0, and v8.8.0 |
Elasticsearch v6.8.0 |
New supported file types
The Nuix Supported File Types v100.6 document includes the following newly supported file types in Nuix Workstation: Added extraction of EXIF metadata from movie files.
No file types included in the Nuix Supported File Types v100.6 document have been excluded from the current 100.6 version.
Resolved issues
This release includes resolutions for the following previously known issues:
Analysis
Improved performance of the application interface after the user adds evidence. Entities are now highlighted when they are part of the search query.
Item counts are no longer displayed in the Address view when de-duplication is enabled.
Opening cases with a large number of numeric properties no longer causes the system to run out of memory.
To limit the number of terms that can be generated in a range, queriesuix.query.specificFieldMaxClauses has been added (defaults to a value of 100000). Interrupted handling during searching no longer generates unexpected error messages.
Extraction
Added support for text transcripts of Slack video and audio clips.
Resolved an issue in which a small number of chat types were treated as immaterial instead of material.
Added support for MSAB schema 23Q3.
Updated the location URLs for the Microsoft 365 connector to include configured filters.
The bulk CSV evidence loader now tests the connection and reports authentication errors for the Google Workspace connector and other plugin-based connectors that define a "test connection" method.
Added a keyword search capability that allows users to ingest matching SharePoint sites when using the Microsoft 365 connector from UI, scripting API, or the bulk evidence loader.
Added validation processing for Microsoft 365 Bulk Evidence Import to provide better error messages. Added extraction of EXIF metadata from movie files.
Added support for extracting input text from macOS IME files.
Improved memory usage when processing very large PDF files.
Fixed an error that was caused by the symbol "+" that appeared in phone numbers while performing bulk redactions.
Removed redundant replies from the display of first messages in Microsoft 365 Teams threads.
Updated the manner in which some array-valued item properties were stored and indexed. For example, NQL queries made against the values will match in a manner that treats the elements of the array as distinct and unordered values rather than a single concatenated and ordered field value.
Improved Microsoft 365 Connector handling of failures encountered when retrieving Microsoft Teams message calendar event attachments. Event names and item types are now included in error messaging.
Processing the contents of very large CSV files no longer results in high memory usage. Improved handling of large or broken ZIP files.
The user list in the Slack Connector can be sorted regardless of whether the text appears in lower or upper case. Location URIs for the Microsoft 365 Connector now include all provided location parameters.
Large MBOX files are now processed appropriately.
To better handle parsing of non-compliant RFC2822 time zones, we added the system property nuix.rfc2822.nonStandardTimeZone.
Resolved an issue with the Promote to Discover metadata template in which the end time of a calendar appointment was used rather than the start time.
Updated the Microsoft 365 Connector to remove support for MicrosoftGraphLocation.withMailboxRetrievals() in the scripting API, and mailboxRetrievals in the bulk evidence loader. These features have been replaced in Exchange Online.
Improved load processing speed for large MBOX files. Resolved an issue with processing EDB 2013.
Resolved a scalability issue with the Microsoft 365 Connector in which a worker “watchdog” could time out for Microsoft Teams chats that have many members. Improved parsing of email From headers when they contain commas.
Resolved an issue in which a third party library caused "text has been truncated" to appear for extracted Microsoft PowerPoint documents and a watermark to appear in printed PDFs. We recommend that you re-ingest any affected documents.
Enabled customers to turn off Aspose processing for Microsoft OneNote data by adding the switch nuix.data.onenote.useAspose (default true).
Resolved a stopwatch error that occurred when users paused and then resume OCR jobs.
To normalize spaces in messaging addresses, we added the switch nuix.messaging.address.normalizeSpace (default true).
Export
Added a createJob function for NLP analysis, featuring a callback option to monitor state changes. Refer to the API documentation for more information. Added the flag Send Additional Metadata, which allows the user to control whether to send metadata to NLP.
Improved performance of NLP by intelligently handling deduplicated items. Added Document Title to the default Nuix Discover profile.
Resolved an issue in Export to RSMF related to chat messages with no associated conversation. Improved NLP processing memory usage.
When an export configuration specifies an MHTML format for emails, the format will also apply to chat messages. Because unnamed attachment entries for printed emails are displayed inline, they are now hidden..
Resolved an issue in which the incorrect item date was used when promoting documents to Nuix Discover. Removed unnecessary logs from Nuix Discover Flat File export.
Scripting
Improved performance for the ItemUtility union, intersection, and difference operators for Elasticsearch cases. Exposed the Google Drive connector via scripting.
Added the ability to allow multiple Word Lists and Named Entity Types to be processed in one task. Provide scripting APIs to retrieve item type tags for an item.
Miscellaneous
Updated case opening to validate the evidence metadata for all evidence containers. Nuix Workstation will generate an error if it encounters an issue, such as a missing required plugin.
Introduced the ability to disable certain aspects of the certificate validation on the Elasticsearch client when connecting to the cluster. The nuix.elasticsearch.client.cert.trustStrategy switch was introduced with the following options:
Default: the default flow that validates the certificate against the truststore of the JRE and the host. TrustAll: will trust any certificate.
TrustSelfSigned: will trust self-signed certificates. In addition, the switch nuix.elasticsearch.client.cert.disableHostVerifier=true can be used to skip the host validation (CNAME) of the certificate.
Updated NSF supported versions.
Improved worker process management for terminated processing jobs.
Resolved an issue in which the system failed when configuring the Deep Learning Classifier in an Elasticsearch case.
Updated jruby to v9.4.3.0. This update resolves the issue in which the system sometimes failed when running the console in interactive mode on some platforms (for example, Docker).
NLP filters are no longer reloaded once a job is complete.
Known issues and limitations
We have identified the following issues and our team aims to provide further support in future releases. This release includes the following known limitations:
Performing OCR: You cannot run OCR as a background process for Simple cases. You can only run OCR as a background process for Compound and Elastic cases.
Support for Emoji Synonyms: Emojis are not displayed in Nuix Workstation running on macOS.
Support for AFF4-L format: The AFF4 v1.0 and AFF4-L standards do not currently support the following features:
Limitations
Encrypted AFF4 volumes
Persistent data store
HTTP backed streams
Splitting an AFF4 Image across multiple volumes Support for signed statements or Bill of Materials
Known issues:
ARN (AFF4 Resource Name) Hygiene - the Open Source AFF4 Java library is not very flexible when handling incoming data (that is, arn://guid/folder/resource is not equal to arn://guid/folder//resource).
LZ4 Compression Header causes incorrect length attributes, an issue specific to Magnet Forensic AFF4 image, and reported to Magnet.
Support for HWPX format: HWPX/HWP password-protected files are only detected but decryption is not supported.