https://community.cisco.com/t5/endpoint-security/high-cpu-utilization-by-amp/m-p/4081387#M5371 <P>Does the user have anything that runs when the system boots?&nbsp; The likely scenario is that something is either creating a ton of files or network connections.&nbsp; I suggest putting the system into <A href="https://www.cisco.com/c/en/us/support/docs/security/sourcefire-fireamp-endpoints/118228-technote-fireamp-00.html" target="_self">debug mode</A>&nbsp;and generating a diagnostic.&nbsp; Then, you can either run some analysis manually with <A href="https://github.com/CiscoSecurity/amp-05-windows-tune" target="_self">this script</A> or <A href="https://github.com/CiscoSecurity/amp-05-health-checker-windows" target="_self">this program</A>.&nbsp; If you would prefer to have someone else do the analysis, you should open a TAC case with the diagnostic.</P> <P>&nbsp;</P> <P>Thanks,<BR />Matt</P> Thu, 07 May 2020 16:52:52 GMT Matthew Franks 2020-05-07T16:52:52Z https://community.cisco.com/t5/endpoint-security/high-cpu-utilization-by-amp/m-p/4081333#M5370 <P>Hi,&nbsp;</P><P>An instance of this happening was just brought to my attention by one of our users. According to him every time he reboots his laptop this happens for 30 mins before everything goes back to normal. I have tried looking in AMP but haven't found any anomalies. I am attaching the screenshot of the process as well. Any guidance on this is appreciated.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-center" image-alt="image (5).png" style="width: 400px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/73944i06EB082E9039735E/image-size/medium?v=v2&amp;px=400" role="button" title="image (5).png" alt="image (5).png" /></span></P><P>&nbsp;</P> Thu, 07 May 2020 15:25:40 GMT https://community.cisco.com/t5/endpoint-security/high-cpu-utilization-by-amp/m-p/4081333#M5370 SharmilKhan 2020-05-07T15:25:40Z https://community.cisco.com/t5/endpoint-security/high-cpu-utilization-by-amp/m-p/4081387#M5371 <P>Does the user have anything that runs when the system boots?&nbsp; The likely scenario is that something is either creating a ton of files or network connections.&nbsp; I suggest putting the system into <A href="https://www.cisco.com/c/en/us/support/docs/security/sourcefire-fireamp-endpoints/118228-technote-fireamp-00.html" target="_self">debug mode</A>&nbsp;and generating a diagnostic.&nbsp; Then, you can either run some analysis manually with <A href="https://github.com/CiscoSecurity/amp-05-windows-tune" target="_self">this script</A> or <A href="https://github.com/CiscoSecurity/amp-05-health-checker-windows" target="_self">this program</A>.&nbsp; If you would prefer to have someone else do the analysis, you should open a TAC case with the diagnostic.</P> <P>&nbsp;</P> <P>Thanks,<BR />Matt</P> Thu, 07 May 2020 16:52:52 GMT https://community.cisco.com/t5/endpoint-security/high-cpu-utilization-by-amp/m-p/4081387#M5371 Matthew Franks 2020-05-07T16:52:52Z