“There are some tools for both of those that will assist you with deserialization, and you can look at the objects.”

Transcript evidence from Bill Sempf -- Insecure Deserialization.