A Recursive Session Token Protocol for use in Computer Forensics and TCP Traceback. - Brian D. Carrier; Clay Shields (INFOCOM, 2002)

Defining Digital Forensic Examination and Analysis Tool Using Abstraction Layers. - Brian D. Carrier (Int. J. Digit. EVid., 2003)

Getting Physical with the Digital Investigation Process. - Brian D. Carrier; Eugene H. Spafford (Int. J. Digit. EVid., 2003)

Methods for Cluster-Based Incident Detection. - Brian D. Carrier; Blake Matheny (IWIA, 2004)

A hardware-based memory acquisition procedure for digital investigations. - Brian D. Carrier; Joe Grand (Digit. Investig., 2004)

The session token protocol for forensics and traceback. - Brian D. Carrier; Clay Shields (ACM Trans. Inf. Syst. Secur., 2004)

Automated Digital Evidence Target Definition Using Outlier Analysis and Existing Evidence. - Brian D. Carrier; Eugene H. Spafford (DFRWS, 2005)

Volume analysis of disk spanning logical volumes. - Brian D. Carrier (Digit. Investig., 2005)

Risks of live digital forensic analysis. - Brian D. Carrier (Commun. ACM, 2006)

Categories of digital investigation analysis techniques based on the computer history model. - Brian D. Carrier; Eugene H. Spafford (Digit. Investig., 2006)

A hypothesis-based approach to digital forensic investigations - Brian D. Carrier (2006)

Digital Forensics Works. - Brian D. Carrier (IEEE Secur. Priv., 2009)

Different interpretations of ISO9660 file systems. - Brian D. Carrier (Digit. Investig., 2010)