In the investigation surrounding the disappearance of Nancy Guthrie, digital forensics has become one of the most critical tools for detectives trying to understand what happened in the days leading up to the incident. Authorities from the Pima County Sheriff’s Department confirmed earlier that several electronic devices belonging to Nancy were seized and examined as part of the evidence review process.
Among those devices was a tablet believed to have been used regularly by Nancy during her final weeks. Investigators said the IPAD had initially appeared normal, but technicians discovered that certain files were protected behind additional security layers that required specialized forensic tools to access. According to law-enforcement sources, unlocking these files took several days of careful analysis.
Family members, including Savannah Guthrie, had already given permission for investigators to review the contents of the device in hopes that it might contain clues about Nancy’s state of mind before she vanished. Officials noted that the tablet contained routine items such as photographs, personal notes, and correspondence.
But there was also one folder investigators could not immediately open.
The directory carried a simple name: “A GIFT FOR SAVANNAH.”
At first glance, the title appeared almost sentimental—something a mother might create for her daughter as a personal archive of memories. However, the folder was protected by encryption, meaning its contents could not be viewed without first bypassing the security system.
After forensic specialists finally succeeded in unlocking it, what they found reportedly changed the direction of the investigation.
Inside the folder were several VIDEO FILES.
Each video carried a timestamp.
And each timestamp dated back to the THREE DAYS leading up to the night Nancy disappeared.
Investigators reviewing the recordings reportedly discovered that the footage did not contain family memories or messages. Instead, the camera appeared to be positioned discreetly inside the house, capturing quiet views of hallways, entrances, and parts of the living room.
The recordings seemed to have been triggered by motion.
In the first video, the house appears silent. After several seconds, a shadow crosses the frame near the entrance. Moments later, the front door opens slowly.
A figure steps inside.
The person moves cautiously, glancing around the room before walking deeper into the house. The footage ends before their face becomes fully visible.
But the second video reveals more.
This time the figure enters again—moving with greater confidence, as though already familiar with the layout of the home. The camera captures the person examining shelves, opening a cabinet door, and briefly pausing near a hallway that leads to Nancy’s study.
Investigators noted something particularly unusual: the intruder does not appear to force entry.
Instead, the door opens smoothly.
As if the person already had ACCESS.
The third recording is the most unsettling.
In this video, the figure enters the house late in the evening. The camera angle briefly catches their face when they turn toward a light source near the wall.
According to individuals who have viewed the footage, the image is clear enough for identification.
And that is when investigators realized something deeply troubling.
The person appearing in the video was not a stranger.
Sources close to the investigation say the face belongs to someone the family had known and trusted for years—an individual who had been welcomed into the house without suspicion.
Authorities have not publicly released the identity of the person visible in the recordings. Officials say the footage remains part of an active investigation and must be carefully verified before any conclusions are announced.
However, investigators believe Nancy may have created the encrypted folder deliberately.
The title “A GIFT FOR SAVANNAH” now appears less like a sentimental message and more like a warning left behind by someone who sensed danger but had not yet been able to prove it.
Whether Nancy recorded the videos intentionally to document the intruder—or whether the files were automatically captured by a hidden camera system linked to her tablet—remains under examination.
For detectives reviewing the footage frame by frame, one detail stands out above everything else.
The person moving quietly through the house during those three nights behaved less like a burglar and more like someone studying the property.
Someone preparing.
And if investigators confirm that the intruder is indeed the trusted individual many now suspect, the videos hidden inside Nancy’s iPad may reveal that the threat she feared was already inside the circle she trusted most.