This policy setting lets Microsoft Intune Endpoint Protection track resolved malware for a specified length of time so that ...

This policy setting lets Microsoft Intune Endpoint Protection track resolved malware for a specified length of time so that you can manually check previously infected client computers.

You can specify any value from 0 to 30 days. Endpoint Protection tracks resolved malicious software on client computers for the length of time that you specify.