What are some of the most frequently used (or favorite) tools in your toolbox?

We're a month into 2023 and I'm finding myself re-evaluating what tools me and my team use on the job. Just wondering what everyone is still using on a regular basis for internal work, or as an MSSP for clients.

Some of my random picks:

* [Nessus](https://www.tenable.com/products/nessus) \- Vulnerability scanning
* Alternatively, [OpenVAS](https://www.openvas.org/)
* [Zeek](https://zeek.org/)/[RITA](https://www.blackhillsinfosec.com/projects/rita/) \- C2 beacon detection
* [Loki](https://github.com/Neo23x0/Loki) \- YARA/IOC scanner
* [Bloodhound](https://github.com/BloodHoundAD/BloodHound) \- AD attack path management/enumeration
* [Volatility](https://www.volatilityfoundation.org/) \- Memory forensics
* [DeepBlueCLI](https://github.com/sans-blue-team/DeepBlueCLI) \- Event …

blueteamsec clients internal job mssp random team tools work