We need an API endpoint or field that allows us to distinguish which devices are associated with EDR vs SIEM, or to determine whether EDR and/or SIEM are enabled for a given organisation.