Serious Discussion Compromise Assessment Tooling

[Sandbox Breaker - DFIR]

What is your favorite compromise assessment tool? What's your arsenal consist of?

Guns out!

 

[Stenographers]

I will start. sysinternals, just like all of it. Volatility. A sata write blocker. Cuckoo sandbox, pestudio. Not an exhaustive list but good tools