Task Cancellation and Deletion
Last updated
Was this helpful?
Last updated
Was this helpful?
All tasks within Binalyze AIR can be centrally managed at the organizational level from a dedicated Tasks page. This view is accessible from the Main Menu by selecting More > Tasks.
From this interface, users can:
View a comprehensive list of all tasks associated with the currently selected organization.
Filter and monitor tasks across their lifecycle, including those that are:
Completed
In progress
Cancelled
Failed
This consolidated view is essential for maintaining operational oversight and ensuring that investigation and response workflows are being executed as expected.
For each task, detailed information such as task type (e.g., acquisition, triage, timeline generation), status, and associated endpoints is available, allowing for granular tracking and auditability.
The blue ‘eye’ icon at the end of each task entry allows users to view detailed information about the task.
In the Task Details window, there are two tabs: Information and Assigned To. The Information tab displays details such as who created the task, the policy that was applied, the DRONE analyzers used, and the acquisition profile selected.
The Assigned To tab provides information about the assets to which the task has been assigned. For each asset, an Actions menu is available, enabling investigators to:
Delete the task
Purge local data from the endpoint
Add the data to a case
Note: Data can be added to multiple cases simultaneously
Send the data to a timeline for correlation and analysis
Use the collected data to perform a Compare task against other acquisitions
Managing large volumes of tasks is now faster and more efficient with the introduction of Bulk Task Cancellation and Bulk Task Deletion capabilities.
Users can now cancel one or more tasks directly from the Tasks view using the familiar bulk action toolbar. This is particularly useful for streamlining task management across environments with high automation or frequent testing.
Key features include:
Full support for advanced filtering, allowing users to quickly identify tasks based on:
Task type
Task name
Source
Status
As seen below, once tasks are selected, the bulk action bar automatically appears, displaying a task count (this count reflects the number of tasks selected, not the number of affected assets).
Selecting Cancel Task will cancel both the Assigned and Processing tasks listed above as soon as the user selects 'Yes' in the warning message that appears:
Both tasks will then be marked with the status “Cancelled.”
In addition to cancellation, users can now delete multiple tasks in one action. When selecting the Delete Tasks option from the bulk action bar, two deletion modes are available:
Delete Task Only Removes the task from the console, but leaves any associated data intact on the endpoint.
Delete and Purge Local Data Deletes the task and removes all associated local data from the target asset(s).
These enhancements simplify the process of cleaning up redundant, failed, or misconfigured tasks, helping to maintain a more organized tasking environment and providing greater control over retained evidence and endpoint storage.
