18 lines
1.3 KiB
PowerShell

# Create a reference to the CIM_EthernetPort instance, select the wired interface.
$ethernetPortRef = $wsmanConnectionObject.NewReference("SELECT * FROM CIM_EthernetPort WHERE DeviceID='Intel(r) AMT Ethernet Port 0'")
$heuristicPacketFilterInterfacePolicyRef = $wsmanConnectionObject.NewReference("AMT_HeuristicPacketFilterInterfacePolicy")
$heuristicPacketFilterInterfacePolicyRef.AddSelector("Antecedent", $ethernetPortRef)
# Traverse to the AMT_HeuristicsPacketFilterInterfacePolicy instances that are connected to the CIM_EthernetPort instance.
foreach($heuristicPacketFilterInterfacePolicyItem in $heuristicPacketFilterInterfacePolicyRef.Enumerate("http://schemas.dmtf.org/wbem/wsman/1/wsman/SelectorFilter", $null))
{
# For each instance, check if it is associated to the AMT_SystemDefensePolicy instance.
if($heuristicPacketFilterInterfacePolicyItem.Object.GetProperty("Dependent").IsA("AMT_SystemDefensePolicy"))
{
if(($heuristicPacketFilterInterfacePolicyItem.Object.GetProperty("Enabled") -like $true) -or ($heuristicPacketFilterInterfacePolicyItem.Object.GetProperty("Active") -like $true))
{
# Get the AMT_SystemDefensePolicy object using its EPR.
$systemDefensePolicyInstance = $heuristicPacketFilterInterfacePolicyItem.Object.GetProperty("Dependent").Ref.Get()
break
}
}
}