Lateral Movement

T1021.006 - Remote Services: Windows Remote Management

This module uses System.Management.Automation .NET namespace to execute commands on randomly picked remote hosts using WinRM.