Within Missing Proof
Why Folder Paths Can Decide What a File Means
A filename can appear extraordinary in isolation, while its folder path may reveal a graphics project, training exercise or scientific workflow.
On this page
- What directory paths reveal about ownership
- How neighboring files establish purpose
- Why isolated filenames invite overinterpretation
Page outline Jump by section
Introduction
When evaluating Gary McKinnon’s claims about unusual files allegedly found on United States government systems, one of the most overlooked questions is not the filename itself but where that file was stored. A filename can appear extraordinary in isolation while becoming ordinary once its full directory path is known. Conversely, a mundane filename can take on greater significance if it appears within an unexpected operational environment. Because no verified folder paths, directory listings or preserved file locations have been made public for the files McKinnon described, an important layer of interpretation has been lost. That missing context prevents investigators from determining whether a document belonged to an operational programme, a research project, a graphics repository, a training exercise or another entirely conventional workflow.[NIST]nist.govdigital evidence preservation considerations evidence handlersDigital Evidence Preservation: Considerations for Evidence Handlers | NISTSeptember 8, 2022…
Why Folder Paths Can Decide What a File Means
Computers organise information through directory structures rather than isolated filenames. A complete path identifies not only the file itself but also its relationship to projects, departments, software and users.
For example, the same spreadsheet titled “Non-Terrestrial Officers.xls” could carry very different implications depending on where it resided:
/Personnel/Space Operations//Training/Exercise Scenarios//Game Development/Assets//Presentation Drafts//Archived Research/
The filename alone cannot distinguish between these possibilities. In digital forensics, investigators therefore treat a file’s location as evidence in its own right because directories often reveal organisational purpose that the filename does not. NIST guidance on digital evidence similarly emphasises preserving the original context of digital objects rather than extracting individual files in isolation.[NIST]nist.govdigital evidence preservation considerations evidence handlersDigital Evidence Preservation: Considerations for Evidence Handlers | NISTSeptember 8, 2022…
Within the McKinnon case, this distinction matters because the public has never seen authenticated directory structures associated with the files he later described. Without them, later interpretations rely almost entirely on memory.
What Directory Paths Reveal About Ownership
Directory hierarchies frequently identify who created or maintained information.
A folder path may indicate:
- the department responsible for the material;
- the software package that generated it;
- whether it belonged to an active project or archived records;
- whether the material was operational, experimental or administrative;
- whether access was limited to particular users or shared across an organisation.
Many government and corporate systems separate operational data from demonstrations, simulations, documentation and software resources using directory structures. Even if filenames remain unchanged, the surrounding hierarchy often explains their intended use.
Suppose an image of an unusual object were stored inside a directory dedicated to image-processing tests, compression experiments or graphical editing. That would naturally suggest a different interpretation than if the identical image appeared within a validated engineering archive or mission evidence repository.
Without the original path, those distinctions disappear.
How Neighbouring Files Establish Purpose
Individual files rarely stand alone. Their neighbouring documents often explain what they are.
Investigators commonly examine:
- README files explaining projects;
- reports referencing the same dataset;
- earlier or later document revisions;
- presentation slides;
- software configuration files;
- related images;
- database indexes;
- temporary working copies.
A remarkable filename surrounded by dozens of ordinary engineering documents may prove to be part of an entirely routine workflow. Likewise, a strange spreadsheet beside meeting minutes, personnel records or software documentation may immediately acquire an ordinary administrative explanation.
This principle applies directly to McKinnon’s recollections. Even if the filenames he remembered were accurate, the surrounding folders and associated files—which have never been independently examined—could substantially alter their interpretation.
Why Isolated Filenames Invite Overinterpretation
Humans naturally infer meaning from striking words.
Terms such as:
- “non-terrestrial”;
- “fleet”;
- “transfer”;
- “officers”;
- unfamiliar ship names
can sound extraordinary when detached from their original environment.
However, organisations routinely employ specialised terminology that appears dramatic outside its intended context. Aerospace agencies, military organisations and software developers often use labels that make sense only within internal projects.
McKinnon himself later acknowledged uncertainty about the spreadsheet he described, suggesting it might have related to a military game or hypothetical exercise rather than hidden extraterrestrial programmes. That uncertainty illustrates precisely why contextual information matters more than memorable wording.[Reddit]reddit.comGary Mckinnon talks about finding the "Non-terrestrial Officer" file in the NASA server. Thoughts?September 28, 2023…
Without authenticated directory information, readers cannot distinguish between literal operational terminology and project-specific jargon.
Missing Folder Paths Prevent Independent Testing
The absence of folder information creates practical problems for verification.
Researchers cannot determine:
- which computer actually stored the file;
- whether multiple copies existed elsewhere;
- whether the document belonged to NASA, the Department of Defense or another organisation;
- whether related documents remain archived;
- whether the file originated from third-party software;
- whether naming conventions matched known departmental practices.
These questions are normally answerable through preserved directory structures, access logs and associated metadata. Once those records are unavailable, later investigators lose the ability to reconstruct the file’s original environment using accepted forensic methods. NIST guidance stresses preserving digital evidence together with its provenance and contextual information because separating files from their original environment can undermine later interpretation.[NIST]nist.govdigital evidence preservation considerations evidence handlersDigital Evidence Preservation: Considerations for Evidence Handlers | NISTSeptember 8, 2022…
Folder Context Is Often More Valuable Than the Filename
One lesson from digital forensics is that filenames are among the least reliable indicators of meaning. People rename files, reuse templates, copy documents between projects and inherit old directory structures. The surrounding environment usually provides stronger evidence than the title itself.
In the McKinnon case, this principle helps explain why extraordinary filenames alone cannot establish extraordinary conclusions. Without authenticated folder paths, neighbouring documents and preserved directory structures, investigators cannot determine whether the reported files represented operational records, demonstrations, training material, speculative projects or something else entirely. The missing folder context does not prove that McKinnon’s recollections were wrong, but it removes one of the most important mechanisms for testing what those files actually meant when they existed on their original systems.
Amazon book picks
Further Reading
Books and field guides related to Why Folder Paths Can Decide What a File Means. Use these as the next step if you want deeper reading beyond the article.
The Demon-Haunted World
Rating: 4.5/5 from 43 Google Books ratings
NEW YORK TIMES BESTSELLER • From the renowned astronomer and author of Cosmos comes a “powerful [and] stirring defense of informed ration...
File System Forensic Analysis
The Definitive Guide to File System Analysis: Key Concepts and Hands-on Techniques Most digital evidence is stored within the computer's...
Digital Evidence and Computer Crime
Digital Evidence and Computer Crime, Second Edition, is a hands-on resource that aims to educate students and professionals in the law en...
The Basics of Digital Forensics
The Basics of Digital Forensics provides a foundation for people new to the field of digital forensics. This book teaches you how to cond...
eBay marketplace picks
Marketplace Samples
Live-tested eBay searches with available results related to this page.
Selected fromfile system poster oneBay.co.uk.
Endnotes
1.
Source: nist.gov
Title: digital evidence preservation considerations evidence handlers
Link:https://www.nist.gov/publications/digital-evidence-preservation-considerations-evidence-handlers
Source snippet
Digital Evidence Preservation: Considerations for Evidence Handlers | NISTSeptember 8, 2022...
Published: September 8, 2022
2.
Source: nist.gov
Title: Guide to Integrating Forensic Techniques into Incident Response | NIST
Link:https://www.nist.gov/publications/guide-integrating-forensic-techniques-incident-response
Source snippet
Guide to Integrating Forensic Techniques into Incident Response | NIST...
3.
Source: reddit.com
Link:https://www.reddit.com/r/UFOs/comments/16uujkn/gary_mckinnon_talks_about_finding_the/
Source snippet
Gary Mckinnon talks about finding the "Non-terrestrial Officer" file in the NASA server. Thoughts?September 28, 2023...
Published: September 28, 2023
4.
Source: nist.gov
Title: Committee Facial &
Link:https://www.nist.gov/glossary-term/38416
Source snippet
File Header | NISTJanuary 15, 2025 — File Header in computer forensics, the data within a file that contains identifying information abou...
Published: January 15, 2025
5.
Source: nist.gov
Title: Digital Evidence Pres
Link:https://www.nist.gov/itl/ssd/software-quality-group/computer-forensics-tool-testing-program-cftt/digital-evidence
Source snippet
ervation: Considerations for Evidence Handlers | NISTSeptember 28, 2022 — DIGITAL EVIDENCE PRESERVATION: CONSIDERATIONS FOR EVIDENCE HAND...
Published: September 28, 2022
6.
Source: nist.gov
Title: framework harmonizing forensic
Link:https://www.nist.gov/adlp/spo/organization-scientific-area-committees-forensic-science/framework-harmonizing-forensic
Source snippet
A Framework for Harmonizing Forensic Science Practices and Digital/Multimedia Evidence | NISTJune 15, 2021 — A FRAMEWORK FOR HARMONIZING...
Published: June 15, 2021
7.
Source: nist.gov
Link:https://www.nist.gov/publications/advancing-coordinated-cyber-investigations-and-tool-interoperability-using-community
8.
Source: nist.gov
Title: guide details forensic practices data analysis
Link:https://www.nist.gov/news-events/news/2006/09/nist-guide-details-forensic-practices-data-analysis
9.
Source: csrc.nist.gov
Link:https://csrc.nist.gov/pubs/sp/800/86/final
10.
Source: nvlpubs.nist.gov
Title: SP.800 171r3
Link:https://nvlpubs.nist.gov/nistpubs/SpecialPublications/800-171r3/NIST.SP.800-171r3.html
11.
Source: GOV.UK
Title: www.gov.uk Digital Imaging and Multimedia Procedure v3.0
Link:https://www.gov.uk/government/publications/digital-investigations-digital-imaging-and-multimedia-procedure/digital-imaging-and-multimedia-procedure-v30
Source snippet
It will then be stored securely pending its production (if required) at court as an exhibit. Only in the event of any doubt being cast on...
Additional References
12.
Source: academic.oup.com
Title: After acquiring a forensically sound image of a subject
Link:https://academic.oup.com/book/30016/chapter/255634518
Source snippet
Behavioral Criminalistics to Elucidate the Cyber Pathway to Intended Violence | International Handbook of Threat Assessment | Oxford Acad...
13.
Source: youtube.com
Title: Digital Forensics Hands-On Lab | USB Evidence Analysis with Autopsy
Link:https://www.youtube.com/watch?v=DpZQYHQbgXs
Source snippet
This collection of videos provides essential background on Gary McKinnon's allegations regarding NASA systems alongside technical walkthr...
14.
Source: youtube.com
Title: Hacking for UFOs and fighting for his life. Who is Gary Mc Kinnon? | Nord VPN
Link:https://www.youtube.com/watch?v=OImdnvQx7sQ
Source snippet
Ancient Aliens: Hacking NASA Secrets (Season 12, Episode 9) | History...
15.
Source: youtube.com
Title: [How To] Autopsy 4: Exporting [file metadata]({{ ‘file-metadata/’ | relative_url }}) and Bodyfile creation
Link:https://www.youtube.com/watch?v=4lDmb-jRp5k
Source snippet
Digital Forensics Hands-On Lab | USB Evidence Analysis with Autopsy...
16.
Source: oercollective.caul.edu.au
Link:https://oercollective.caul.edu.au/digital-evidence-manual/chapter/chapter-4-computer-as-evidence/
17.
Source: youtube.com
Title: UK hacker’s extradition to US blocked
Link:https://www.youtube.com/watch?v=v4Js8DF80HY
Source snippet
[How To] Autopsy 4: Exporting file metadata and Bodyfile creation...
18.
Source: youtube.com
Title: Ancient Aliens: Hacking NASA Secrets (Season 12, Episode 9) | History
Link:https://www.youtube.com/watch?v=20rWFDfh68Y
Source snippet
UK hacker's extradition to US blocked...