Arc Bookmarks
Overview
Section titled “Overview”Evidence: Arc Bookmarks
Description: Collect Arc Bookmarks
Category: Applications
Platform: macos
Short Name: abkmrks
Is Parsed: Yes
Sent to Investigation Hub: Yes
Collect File(s): No
Background
Section titled “Background”Browser bookmarks represent user-saved favorite websites and organizational folders. This data reveals frequently accessed sites, user interests, and potential indicators of reconnaissance, phishing targets, or suspicious infrastructure.
Data Collected
Section titled “Data Collected”This collector gathers structured data about arc bookmarks.
Arc Bookmarks Data
Section titled “Arc Bookmarks Data”| Field | Description | Example |
|---|---|---|
UserName | User Name | Example value |
ProfileName | Profile Name | Example value |
BrowserName | Browser Name | Example value |
GUID | GUID | Example value |
BookmarkID | Bookmark ID | Example value |
Name | Name | Example value |
Type | Type | Example value |
URL | URL | Example value |
ParentFolder | Parent Folder | Example value |
DateAdded | Date Added | 2023-10-15 14:30:25+03:00 |
DateLastUsed | Date Last Used | 2023-10-15 14:30:25+03:00 |
DateModified | Date Modified | 2023-10-15 14:30:25+03:00 |
Collection Method
Section titled “Collection Method”This collector parses the browser’s Bookmarks file to extract saved URLs, folder structures, timestamps, and metadata.
Forensic Value
Section titled “Forensic Value”Bookmark analysis identifies targeted websites, phishing pages, command-and-control servers, internal resources, and organizational reconnaissance patterns. Investigators can detect social engineering campaigns, credential harvesting attempts, and lateral movement preparation.