Intel AMT Features > System Defense > Use Cases > Get Heuristics Settings
CollapseAll image

Get Heuristics Settings


Heuristic settings are NOT supported by wireless interfaces.  Therefore, this feature is not available on LAN-less platforms.

The following steps describe how to get the Heuristics settings of an Intel AMT system.

1.  Find the instance of CIM_ComputerSystem representing the Intel AMT, as described in Discovering CIM_ComputerSystem.

2.  From the CIM_ComputerSystem instance, find the instances of CIM_ElementSettingData association class.

3.  Examine the list returned by the Enumerate method and search for instances where:

   The value of the SettingData property is AMT_HeuristicPacketFilterSettings.

   The value of the ManagedElement property is CIM_EthernetPort.

Perform the following steps for each of the instances you find.

4.  Invoke CIM_EthernetPort.Get on the wired interface instances using the EPR stored in the ManagedElement property of CIM_ElementSettingData. The instance specifies the interface in the DeviceID property:




“Intel(r) AMT Ethernet Port 0” – wired port

5.  Invoke AMT_HeuristicPacketFilterSettings.Get using the EPR stored in the SettingData property of CIM_ElementSettingData.

Click here for a snippet demonstrating this step

You can execute this snippet by inserting it into the execution template found here.


# Create a reference to the CIM_EthernetPort instance.

$ethernetPortRef = $wsmanConnectionObject.NewReference("SELECT * FROM CIM_EthernetPort WHERE DeviceID='Intel(r) AMT Ethernet Port 0'")

$elementSettingDataRef = $wsmanConnectionObject.NewReference("CIM_ElementSettingData")

$elementSettingDataRef.AddSelector("ManagedElement", $ethernetPortRef)

# Traverse to the CIM_ElementSettingData instances that are connected to the CIM_EthernetPort instance.

foreach($elementSettingDataItem in $elementSettingDataRef.Enumerate("", $null))


    # For each instance, check if it is associated to the AMT_HeuristicPacketFilterSettings instance.



          # Get the AMT_HeuristicPacketFilterSettings object using its EPR.

          $heuristicPacketFilterSettingsRef = $elementSettingDataItem.Object.GetProperty("SettingData").Ref

          $heuristicPacketFilterSettingsInstance = $heuristicPacketFilterSettingsRef.Get()






Instance Diagram

Classes Used in This Flow

SDK Sample

Located at:<AMT SDK>\Windows\Intel_AMT\Samples\WS-Management\SystemDefense


See Also:

   Network Isolation

   System Defense Policies

   Heuristic Policies

   System Defense Filter Types

   Processing Network Packets with System Defense

   Networking Packet Structures

Copyright © 2006-2013, Intel Corporation. All rights reserved.