Tool to investigate downed services

So I’m taking part in an defensive style security competition that involves us (blue team) getting scored on how long we can keep our services and machines up. We can also score points for writing IR reports, and the report is graded based on how accurate and comprehensive the investigation is. I’ve been trying to figure out which forensics software to learn to best deal with investigating red team taking down specifically our services, how to figure it out how …

blue blue team competition computerforensics defensive investigation machines points report reports score security services team tool writing