I'm not sure. It's possibly after a full scan.
These are the times that they occured:
2013-03-31 05:15:35
2013-03-25 05:24:42
That they were both at similar times, and when it was unlikely that the PC would otherwise be in use, made me think that it could be related to Endpoint.
Thanks for the reply.