Digital forensics could be the tool that helps ‘paint a picture of truth’ in the Guthrie case
As the search for Nancy Guthrie continues without a publicly named suspect, investigators are facing hurdles with DNA evidence. However, experts suggest that digital forensics might offer crucial insights into the mystery. Authorities have not yet disclosed much about the digital clues in the case, yet Heather Barnhart, a digital forensics specialist at SANS Institute and Cellebrite, asserts that the culprit likely left a digital footprint.
“People forget how much their data spreads across devices. So the same thing that complicates investigations also makes it difficult for criminals to erase their tracks,” Barnhart explained.
With nearly five weeks having passed since Guthrie, the mother of TODAY co-anchor Savannah Guthrie, was reported missing on February 1, digital forensics has already revealed images of a masked man captured by her doorbell camera in the hours before her disappearance. Despite these findings, no suspect or person of interest has been publicly identified.
Concerns for Guthrie have grown, prompting her family to offer a $1 million reward for her safe return. Investigators are also grappling with DNA evidence from gloves found two miles away from her home, which yielded no matches in the FBI’s CODIS database. Additional DNA samples collected from Guthrie’s residence are under scrutiny, though the lab handling them has noted challenges with the sample quality.
“Your phone is a silent witness to your life. It knows everything you do,” Barnhart said. “Forming those patterns and then searching for anomalies in someone’s digital footprint is key here.”
Pima County Sheriff Chris Nanos expressed optimism about using investigative genetic genealogy, a technique merging DNA analysis with genealogical research. He emphasized his team’s determination to follow every lead. “We’re not going to give up. We’re going to find Nancy, and we’re going to find out who did this,” he stated earlier this month.
Chris Burbank, a former Salt Lake City police chief, highlighted that physical evidence alone may not solve the case. “Let’s start combing through every other bit of information that exists,” he urged. He proposed leveraging artificial intelligence to analyze social media activity, as individuals often leave digital traces in online interactions.
“Digital evidence could arise with a suspect’s name or through technology like license plate readers,” Barnhart noted. “It will also paint a picture of truth.”
According to Barnhart, digital forensics examines data from devices and online platforms, including cloud services. In the 2022 University of Idaho murders case, she played a pivotal role. Initially, the lack of evidence alarmed everyone, but analyzing phone and laptop logs helped uncover a timeline linking Bryan Kohberger to the crime. “He created a perfect timeline by manually powering down a device at 100% battery,” she recalled, explaining how the logs became essential to the case.
Barnhart emphasized that phones can reveal daily routines, but these patterns may shift before a crime. “Typically, you don’t act the same way every day,” she said, underscoring the importance of detecting deviations in digital behavior. The integration of tools like cell tower data and Wi-Fi logs further illustrates how digital forensics can illuminate hidden details in complex cases.
