Update windows.json

[stoysec]

New rule - PowerShell Remoting

[EFA006]

Hi @stoysec ,

What do you think if we rename the rule to 'Remote Execution via WinRM' or 'WinRM Remote Command Execution Detected'?

Given that the rule detects more than PowerShell remoting?

[stoysec]

Hi @EFA006

Thanks for your comment, I'll modify it to 'Remote Execution via WinRM' - it is indeed more accurate and covers both PowerShell and other remote commands.