WinRM
Named by 3 kept items in this workspace.
2 items name it under tools and 1 under affected products.
Search every workspace for WinRM. It matches the name as written, so it can find other things that share it.
The items that name it 3
Lateral movement lab practice (PSRemoting/WMI/SMB)
remote management protocol tested for administrative connection (PSRemoting), blocked by UAC filtered token
Windows Remote Management
All technologies in this workspace.