There should be an option in the toolbar in the Endpoint Manager portal to manually trigger scans (instead of having to go to Security > Endpoint Security Status and find the endpoint.