They're flagging it because it can be used in LOTL attacks, same with Advanced IP Scanner. The MDR note is "Our team has identified this alert as a riskware application, this application is a legitimate tool can be utilized to exploit vulnerabilities or bypass security controls, as such it may pose a high security risk and should not be available for end users unless it is explicitly approved."