Check if a system rebooted after a SentinelOne agent upgrade or install.

SentinelOne_Reboot_Compliance.ps1

$SentinelOne = Get-WmiObject -Class Win32Reg_AddRemovePrograms | Where-Object { $_.DisplayName -eq "Sentinel Agent" }
$Boot = Get-WmiObject -class Win32_OperatingSystem | Select-Object __SERVER,@{label='LastRestart';expression={$_.ConvertToDateTime($_.LastBootUpTime)}}

If ( $SentinelOne ) {
    # Quick date-time conversion
    $InstallDate = Get-Date $([Datetime]::ParseExact($SentinelOne.InstallDate, 'yyyyMMdd', $null))
    $LastRestart = Get-Date $Boot.LastRestart

    #Write-Host "Last Reboot: $LastRestart"
    #Write-Host "S1 Installed: $InstallDate"

    If ( $InstallDate -gt $LastRestart ) {
        # LastRestart should be greater than InstallDate if system rebooted after upgrade.
        # This If statement should evaluate to $false if system still requires a reboot.
        return $false
    } Else {
        # LastRestart newer/greater than InstallDate, system is compliant.
        return $true
    }
}