Agents run on a schedule, but you can request an immediate scan here. Because agents connect outbound-only, the request is queued and the agent picks it up within ~60 seconds (in watch mode), then reports fresh evidence.