This is the timestamp of the most recent virus detection specifically over SMTP. An admin cross-references this timestamp against mail logs to identify the specific message, sender, and set of recipients involved, which is the first step in a phishing or malware-email incident response. For example, this timestamp lining up with a burst of similar emails hitting several mailboxes within the same minute, indicating a mass-mailing campaign rather than an isolated incident.