A PSIRT might use a range of tools, including vulnerability scanning and detection tools, security information and event management (SIEM) systems, incident tracking systems, and various communication tools.