Copyright (C) 2006 Intel Corporation Intel(R) Active Management Technology (Intel(R) AMT): A short description of the SystemDefense sample code for the usage of developers. SystemDefense sample application: ----------------------------------- This sample application demonstrates how to use various commands of the SystemDefense and CBHeuristic services over WSMan. How to run the sample: ---------------------- 1. Open "SystemDefense.csproj" in Microsoft Visual Studio* and build the project An output file "SystemDefense.exe" should be created. 2. Make sure that Intel.Wsman.Scripting.dll is are located in the same place as the "SystemDefense.exe" file. 3. Make sure that the Intel(R) AMT device has been activated on the target machine. 4. Use the generated executable as described in the command usage (type the command to get the usage instructions). Notes: ------ 1. This sample uses the Intel.Wsman.Scripting.dll library. 2. This sample, among the rest, creates a blocking System Defense policy, System Defense filters (8021 and IP filters) and an Agent Presence Watchdog agent. Please, be sure you have no policy, filter nor agent with matching properties (same Name for the policy and filters, and, same DeviceID for the agent) as the ones created by this sample, otherwise the sample will fail and might cause unexpected behavior to the system (such as deletion of the already existing policy or/and filters). 3. Make sure to run the heuristic flows (-apiheuristic, -enableheuristic, -removeheuristic, -configheuristic and -disableheuristic) against a heuristic supporting platform. Heuristic system defense is supported by Intel(R) AMT Releases 3.x and 5.x and desktop instances of Releases 6.x. Running any of the heuristic flows against a platform which does not support heuristic will cause unexpected behavior. 4. The "Create and enable a policy" flow (-createpolicy) should be used before using "Add heuristic to a policy" (-configheuristic) or "Remove heuristic from a policy" (-removeheuristic) flows. 5. In order to successfully configure heuristic, the heuristic packet filter settings must be enabled. Use "Enable heuristic packet filter settings" flow (-enableheuristic) to enable the heuristic packet filter settings. Important: using "Enable heuristic packet filter settings" (-enableheuristic) or "Disable heuristic packet filter settings" (disablepolicy) flows will overwrite the existing heuristic settings. ------------------------------------------------------------------- * Other names and brands may be claimed as the property of others.