DFRWS 2004 Welcome Letter Dear 2004 Attendee: I would like to take this opportunity to welcome you to DFRWS 2004. Since the inception of DFRWS four years ago, there has been a growing interest in the scientific foundations and application of digital forensics. This has been evidenced by the variety emerging texts written by professionals who are committed to the field, and bolstered by the offering of refereed scientific journals devoted to digital evidence and forensic analysis. New list servers and other online references have proven a valuable resource for collaboration, debate, and dissemination of ideas. Together, we have made considerable progress toward establishing a true foundation for this mixture of science, engineering, and art called Digital Forensics. But, there is still much yet to be done. DFRWS's small but steadily growing community of interest remains committed to establishing this field of study as a recognized forensic science. We will continue to focus on issues related to experimental research in academia, industry, and government, so that techniques and tools will develop as product of sound processes rather than from urgency alone. That being said, we will also endeavor to stay in sync with the current and future needs of our practitioner and DoD friends with a definable, capability-based research agenda. Starting this year, watch for DFRWS mini-workshops on focused, challenging topics such as remote network forensic investigation. These smaller workshops will permit a more thorough look at some of the more difficult, multi-faceted topics that we would otherwise not be able to explore in the usual format. This year's event is important from two related perspectives. First, we hope to give shape to the foundations of our discipline by revisiting the much needed Framework for Digital Forensics. Lead by a Keynote address from Mark Pollitt and an international sampling of speakers, we will hear the latest advanced concepts for digital and multi-domain investigations. At the other end of the spectrum, we will begin to address the future of Digital Forensic Analysis with near real-time investigations that move from the brick-and-mortar crime lab to the virtual scene. We will hear from Lance Spitzner in his Keynote on Honeynets and their forensic potential, followed up by talks on other challenge areas cyber investigators are sure to face. In addition to this research oriented agenda we also realize that more practical interest must be addressed. Day three promises to do just that with 5 additional presentations covering miscellaneous topics in Digital Forensics from steganography to reuse of investigative information. All in all there is something here for most every interest. So, again, I welcome and invite you to roll up your sleeves to listen, learn, discuss, debate, contribute, collaborate, and most importantly, get to know the other motivated professionals working with you for the next two and one half days. Sincerely, Chet Maciag, DR-III ARFL Cyber Operations/Forensic Programs