Version 9.4 Release Notes

  3 minute read  

Security Patch to address CVE-2021-44228 and CVE-2021-45046

As of December 2021, the Nuix Engine and Nuix RESTful Service have been patched to address a reported vulnerability in third-party software, Apache Log4j. Nuix recommends that you update your environment as soon as possible.

Nuix Engine

Nuix RESTful Service has been updated to use version 9.4 of the Nuix Engine. Details about what is included with this update can be found in the v9.4 changelog.

Nuix Collector for Microsoft 365

Nuix RESTful Service now supports the ability to ingest data directly from Microsoft Office 365 using the following new processing endpoint.

POST /cases/{caseId}/evidence/ms365

Using the new endpoint in conjunction with your Microsoft tenant and the Microsoft Graph API, you can now access data from the following Office 365 applications:

• Teams
  • Threaded channel and private messages
  • Attachments
  • Calendars
• Exchange
  • Email
  • Contacts
• SharePoint
  • Sites
  • Subsites
  • Lists (Retrieval of list attachments is not supported.)

For more information, see Ingesting from Microsoft Office 365.

Access

Nuix RESTful Service now supports the ability to configure specific license server types during installation. Supported server types include:

• Nuix Management Server (NMS)
• Relay server with NMS users
• Relay server with CLS users
• Cloud License Server (CLS)

For more information, see Licensing Configuration.

Culling

Item sets

The GET /cases/{caseId}/itemSets/{itemSetName}/items endpoint has been enhanced to now support item marshaling through a new optionsRequest parameter. The new parameter includes the following configurable options:

{
  "caseId": "string",
  "query": "string",
  "startIndex": 0,
  "numberOfRecordsRequested": 100,
  "deduplicate": "md5",
  "metadataProfile": "string",
  "fieldList": [
    "string"
  ],
  "customMetadataList": [
    "string"
  ],
  "propertyList": [
    "string"
  ],
  "itemParameterizedFields": [
    "string"
  ],
  "sortField": "string",
  "sortOrder": "asc"
}

Deprecated endpoints

The following endpoints have been deprecated as they include a payload body which has no defined semantic meaning within a DELETE request:

• DELETE /cases/{caseId}/itemTags
• DELETE /cases/{caseId}/tags
• DELETE /cases/{caseId}/itemCustomMetadata
• DELETE /cases/{caseId}/itemSets/{itemSetName}/items

The functionality of the deprecated DELETE endpoints has been integrated in the following new PATCH endpoints:

• PATCH /cases/{caseId}/itemTags

  Create or remove tags from query items in bulk.

• PATCH /cases/{caseId}/tags

  Create or delete tags for a case in bulk.

• PATCH /cases/{caseId}/itemCustomMetadata

  Add or remove custom metadata on items in bulk.

• PATCH /cases/{caseId}/itemSets/{itemSetName}/items

  Add or delete items to an item set in bulk.

Default JVM arguments

The following JVM arguments are no longer required and have been removed from the default startup configuration of Nuix RESTful Service:

• -Dnuix.processing.worker.timeout=3600

  Sets the timeout in seconds before an item is considered poisoned.

• -Dnuix.region.enableIterruptChecking=true

  Controls whether interrupts are checked when data is read.

• -Dnuix.storage.index.lazyLoadFields=false

  Minor search performance improvement.

• -Dnuix.storage.index.readers=shared

  Minor search performance improvement.

• -Dnuix.store.textIndexDirectoryType=mmap

  Specifies the type of directory to use.

The following JVM argument has been added:

• -Dnuix.worker.useNuixFs=false

  Controls whether to use Nuix fs for local or remote workers.

Export

• When generating thumbnails, if an export directory has not been defined, thumbnails will be exported to a default directory and a warning message will be logged.

Resolved Issues

• The name parameter is now required within the request body of the POST /cases/{caseId}/itemSets endpoint to prevent errors when creating a new item set.