Edge Thumbnails

Overview

Evidence: Edge Thumbnails Description: Collect Edge Thumbnails Category: Applications Platform: macos Short Name: ethmb Is Parsed: Yes Sent to Investigation Hub: Yes Collect File(s): No

Background

Browser thumbnails are cached preview images of visited websites. This visual data supplements browsing history by providing screenshots of accessed pages, useful for recovering deleted history and identifying visited content.

Data Collected

This collector gathers structured data about edge thumbnails.

Edge Thumbnails Data

Field	Description	Example
UserName	User Name	Example value
Browser	Browser	Example value
URL	URL	Example value
URLRank	URL Rank	123
Title	Title	Example value
Profile	Profile	Example value
Path	Path	Example value

Collection Method

This collector extracts cached thumbnail images from browser storage.

Forensic Value

Thumbnail analysis provides visual evidence of visited websites, can recover evidence after history deletion, and helps identify phishing pages, malicious sites, or sensitive internal resources accessed by users through visual inspection.