infected status
Really appreciate some one can shade some light on how does the SEPM determine that a machine has been infected so as what are the conditions that are considered to declare a machine infected.
Moreover once the infected status has been cleared there is no way to retrieve the logs of the infected machine which requires to maintain the a manual record of all the machine that were infected before, on that note like to request Symantec to include the reporting feature to retrieve the old logs of the infected machine (not the current one).