Port 22

Detecting PowerShell Empire using the tools from the Sysinternals suite.