I've been occasionally called upon to do more offensive security work.
Traditionally, the basic toolset would be Kali Linux in a virtual machine.
However, a few years ago it become possible to run it directly in Windows under WSL2, as a much neater and quicker approach.
Later, for an even lighter solution, Docker images of Kali became available.
Earlier this year, Apple released native containerisation support in MacOS, and running Kali containers on Macs becames an intriguing option.