Digital forensics could be the tool that helps ‘paint a picture of truth’ in the Guthrie case
Digital forensics could be the tool that helps ‘paint a picture of truth’ in the Guthrie case
Nearly five weeks have passed since Nancy Guthrie, the mother of “TODAY” co-anchor Savannah Guthrie, was last seen. With no public suspect identified and complications in DNA analysis, investigators are turning to digital forensics to uncover critical clues. While authorities have not detailed the role of digital evidence, experts suggest it holds significant potential. Heather Barnhart, a digital forensics specialist at the SANS Institute and Cellebrite, emphasized that the suspect likely left behind a digital footprint. “People often overlook the vast amount of data their devices store,” she noted. “The same factors that complicate investigations also hinder criminals from erasing their trails completely.”
Phone Data as a Silent Witness
Barnhart described smartphones as “silent witnesses to your life,” capable of recording daily routines. “Forming patterns from this data and spotting deviations is key to identifying hidden activities,” she said. The doorbell camera at Guthrie’s home captured images of a masked individual hours before her disappearance, but no suspect has been named yet. Her family’s $1 million reward for her recovery has heightened public concern, as investigators continue to sift through evidence.
Physical evidence has faced hurdles, particularly with DNA samples. Gloves found two miles from Guthrie’s residence yielded no matches in CODIS, the FBI’s database. Pima County Sheriff Chris Nanos expressed optimism about investigative genetic genealogy, a technique blending DNA analysis with genealogical research. However, the lab handling the samples reported “challenges” with the data. “We’re not going to give up. We’re going to find Nancy, and we’re going to find out who did this,” Nanos affirmed.
“Let’s really start combing every other bit of information that exists out there in the world,” said Chris Burbank, a former Salt Lake City police chief. “Most of the time, people involved in this leave some sort of social media trail.”
Barnhart highlighted the importance of digital tools in solving crimes. “Phones reveal regular patterns and habits,” she explained. “But before a crime, those patterns might shift.” In the 2022 University of Idaho murders, she worked on analyzing Bryan Kohberger’s digital footprint. “Initially, the lack of evidence freaked everyone out,” she recalled. “By examining laptop and phone logs, we uncovered a timeline showing he manually powered down his device at 100% battery, creating a clear window for the attack.”
According to a probable cause affidavit, Kohberger left his home in Washington just before the killings and disabled his phone, which remained offline until after the incident. “Digital forensics encompasses analyzing data from devices and the internet, including cloud storage,” Barnhart added. “Every location, every action, every setting—like airplane mode or Do Not Disturb—can reveal a story.”
