WinRM is protected against NTLMRelay as communications are encrypted.
https://sensepost.com/blog/2025/is-tls-more-secure-the-winrms-case./
https://sensepost.com/blog/2025/is-tls-more-secure-the-winrms-case./
Windows & Active Directory Exploitation Cheat Sheet and Command Reference
https://casvancooten.com/posts/2020/11/windows-active-directory-exploitation-cheat-sheet-and-command-reference/
https://casvancooten.com/posts/2020/11/windows-active-directory-exploitation-cheat-sheet-and-command-reference/