WinRM listening service reconnaissance (WS-Management)

Detects scenarios where an attacker enumerates different remote WinRM listeners for lateral movement purposes.