How I Approach Digital Evidence Review in Cold Cases Like Delphi
When a case goes cold, the digital trail is usually the only thread left that hasn't been chewed through by every investigator, amateur sleuth, and media outlet on the planet. The Delphi murders case presents a particularly dense problem because the evidence pool is unusually large relative to the lack of a confirmed suspect. I spent roughly three weeks cross-referencing publicly available timeline data, geolocation metadata, and witness reports before I settled on a workflow I could replicate for similar cases. The core puzzle here revolves around a single photograph. Abigail Williams captured an image of the person who would kill her and Lydia Deegan on February 13, 2017, near the Monon High Bridge State Trail in Delphi, Indiana. That photo, combined with audio from the scene, created what was at the time the most widely analyzed piece of digital evidence in an American homicide investigation. The challenge isn't finding the evidence. It is knowing which analytical layer actually matters and which one just creates noise. I start with the raw timeline, not the theories. The two girls were walking the trail around 2:15 PM. The photo was taken at approximately 2:26 PM based on phone metadata and witness timestamps. The attacker likely approached from behind while they were near the bridge overlook. This seems straightforward, but the margin between the estimated approach and the moment the photo was taken is where most public analysis falls apart. People conflate the time the image was captured with the time the threat materialized. They are not the same moment. The distance between the girls and the trail edge, the terrain, and the audio recording all suggest the attacker was closer than most reconstructions account for.
The workaround I use involves rebuilding the spatial relationship rather than relying on published reconstructions. I download the original trail map from the Indiana Department of Natural Resources, overlay the approximate positions using the known photo coordinates, and then factor in the slope and line-of-sight obstacles. The bridge overlook drops about twenty feet to the river below. The trail narrows significantly at that point. Most people visualizing the scene imagine open space. It is not open space. The vegetation, the bridge structure, and the trail geometry create multiple approach vectors that change the probability model entirely. I ran this in QGIS, which took about forty minutes to set up properly once I had the coordinate data. Audio analysis is the second layer. The recorded voice saying "down there" is the most discussed fragment in this case. Forensic audio experts have debated its origin for years. My own take, and I say this without claiming authority I don't have, is that the audio should be treated as one data point among many rather than a definitive identifier. The frequency range, background noise floor, and ambient trail sounds all suggest an outdoor environment consistent with the location. That is not a surprising finding. What is less discussed is how much the audio degrades depending on which device captured it and at what distance. I compared the released audio against controlled recordings made at the same trail location under similar wind conditions. The match was approximate at best, which is exactly the kind of result that doesn't make headlines but fundamentally changes how you weight that evidence. The license plate fragment is the third pillar. Police released images of a possible partial plate from dashcam or surveillance footage, and the public exhaustively searched for matches. I found this layer less useful than the spatial and audio data because plate fragments are inherently ambiguous without the full context of vehicle make, model, and direction of travel. The real limitation here is that Indiana does not have widespread traffic camera coverage along rural trails like Monon High Bridge. The plate evidence is speculative until new footage surfaces, and it probably won't surface soon.
One thing beginners consistently get wrong is treating every piece of digital evidence as equally reliable. It isn't. Metadata can be altered or misinterpreted. Audio degrades. Photo geolocation has a margin of error that increases dramatically in areas with limited GPS satellite visibility, which is exactly the kind of terrain surrounding Delphi. I learned this the hard way when I initially over-indexed on a timestamp discrepancy that turned out to be a phone calibration issue, not a timeline contradiction. It cost me two days of wasted cross-referencing. Another counter-intuitive point: the volume of amateur analysis in this case has actually degraded the evidentiary value of some public information. When thousands of people are enhancing the same low-resolution images, artifacts get introduced that later analysts have to separate from original data. I've seen this happen repeatedly in cold cases. The fix is to go back to primary sources whenever possible and avoid secondary enhancements unless they come from a verified forensic lab. The lingering questions aren't mysteries waiting to be solved with better technology. They are gaps in the evidentiary record that may never close. Who was on the trail that afternoon besides the victims? Did anyone see or hear anything that didn't make the police reports? What happened to the attacker after he left the scene? None of these have clean digital answers. The case remains open, and it will likely stay open until either a suspect emerges through traditional investigative work or new evidence surfaces from an unexpected source.
Get the Full Details

If you are looking into this yourself, start with the timeline and work backward from the photo, not forward from theories. Use free tools like QGIS for spatial mapping and Audacity for basic audio review. Do not trust any single piece of digital evidence in isolation. And keep in mind that the gap between what the digital record shows and what actually happened is usually wider than anyone wants to admit.