Hello,
The Intel(r) AMT SDK is publically avaliable on our Manageability Community web site. Within the SDK, you can look at the Sample code and there is also quite a bit of documentation /user guides included. You could certainly use Active Management Technology to detect if software agents (such as Anti-Virus software) were disabled or removed and then you would have policies defined that would indicate what the action(s) taken would be. There are also some writeups on the Manageabilitly site that discuss the 3 different Usage Models and the 8 Use Cases that would come into play accordingly. Hopefully after reading through those papers and familiarizing yourself with the SDK, you will have an idea of how you could accomplish what you need to do.
--Regards (GTH)
--Gael
My Blogs