endpoint scanning