PSTools Suite

69 Tools are rolled together into the Sysinternals Suite. The PSTools Suite is also included in the suite and can be downloaded here: http://technet.microsoft.com/en-us/sysinternals/bb842062.
I will highlight only a few of the tools that I have used.

PSLoggedOn - running just "PSLoggedOn" will display the users that are currently logged onto a system. It will also display their access rights, ie whether they are administrator or not.

PSList - running "pslist" will display the currently running processes. This can display any odd programs that could be used as a backdoor by a hacker.

PSService - this will display a list of services that are currently being ran. "psservice" with no flags will give a list of those services. This list can sometimes be fairly lengthy.

PSFile - this will display a list of all the open files. This is useful to examine any odd files that could be running.

PSInfo - This displays information about the machine we are currently on. Various flags can display different information. For example -h will show installed hotfixes, -s will show installed applications, and -d will show disk volume information. For a complete list of all the flags see http://technet.microsoft.com/en-us/sysinternals/bb897550.aspx.

Personal Remarks: There are a lot more tools listed with PSTools Suite, but I haven't ever touched them. The most common of these tools is just to run pslist. This shows all the running processes that you can then review and flag any as suspicious. All of these programs are ran with no flags attached to them. NetCat-ing them to a forensics machine is the best practice for these tools.