It would be very useful if endpoint protection could pick up on systems that had either a reboot pending for windows updates, or an excessively long uptime (eg greater than a month).