Intel AMT Features > System Defense > Use Cases > Get Heuristics Settings
CollapseAll image

Get Heuristics Settings


Heuristic settings are NOT supported by wireless interfaces.  Therefore, this feature is not available on LAN-less platforms.

This feature was deprecated in Release 10.0 and removed in Release 12.0.

The following steps describe how to get the Heuristics settings of an Intel AMT system.

1.  Find the instance of CIM_ComputerSystem representing the Intel AMT, as described in Discovering CIM_ComputerSystem.

2.  From the CIM_ComputerSystem instance, find the instances of CIM_ElementSettingData association class.

3.  Examine the list returned by the Enumerate method and search for instances where:

   The value of the SettingData property is AMT_HeuristicPacketFilterSettings.

   The value of the ManagedElement property is CIM_EthernetPort.

Perform the following steps for each of the instances you find.

4.  Invoke CIM_EthernetPort.Get on the wired interface instances using the EPR stored in the ManagedElement property of CIM_ElementSettingData. The instance specifies the interface in the DeviceID property:




“Intel(r) AMT Ethernet Port 0” – wired port

5.  InvokeAMT_HeuristicPacketFilterSettings.Get using the EPR stored in the SettingData property of CIM_ElementSettingData.

Click here for a snippet demonstrating this step

You can execute this snippet by inserting it into the execution template found here.


# Create a reference to the CIM_EthernetPort instance.

$ethernetPortRef =$wsmanConnectionObject.NewReference("SELECT * FROM CIM_EthernetPort WHERE DeviceID='Intel(r) AMT Ethernet Port 0'")

$elementSettingDataRef =$wsmanConnectionObject.NewReference("CIM_ElementSettingData")


# Traverse to the CIM_ElementSettingData instances that are connected to the CIM_EthernetPort instance.

foreach($elementSettingDataItem in$elementSettingDataRef.Enumerate("",$null))


    # For each instance, check if it is associated to the AMT_HeuristicPacketFilterSettings instance.



          # Get the AMT_HeuristicPacketFilterSettings object using its EPR.

          $heuristicPacketFilterSettingsRef =$elementSettingDataItem.Object.GetProperty("SettingData").Ref

          $heuristicPacketFilterSettingsInstance =$heuristicPacketFilterSettingsRef.Get()






Instance Diagram

Classes Used in This Flow




SDK Sample

If there is a sample demonstrating this flow, it is included in the SDK installation file. See SDK Installation Layout for details.


See Also:

   Network Isolation

   System Defense Policies

   Heuristic Policies

   System Defense Filter Types

   Processing Network Packets with System Defense

   Networking Packet Structures

Copyright © 2006-2022, Intel Corporation. All rights reserved.