BitLocker feature activation on multiple hosts (native)

Detects scenarios where an attacker enable or reconfigure BitLocker on multiple hosts for ransomware purposes.