ffla.blogg.se

Using procmon
Using procmon












The vendor can submit their software through the Microsoft Security Intelligence portal. We recommend that software vendors follow the various guidelines in Partnering with the industry to minimize false positives. If the vendor's website does not have them, you can open a support ticket with them and ask them to publish one. Search if they have recommendations about antivirus exclusions. If you can readily identify the software affecting system performance, go to the software vendor's knowledge base or support center. Capture performance logs using Windows Performance Recorderįor performance-specific issues related to Microsoft Defender Antivirus, see: Performance analyzer for Microsoft Defender Antivirus Check with vendor for antivirus exclusions.Capture process logs using Process Monitor.You can also provide additional logs to your submission to Microsoft support by following the steps in: Otherwise, you can identify which software is related to the identified performance issue by following the steps in Analyze the Microsoft Protection Log. Read Check with vendor for antivirus exclusions.

using procmon

Follow the steps in Collect Microsoft Defender Antivirus diagnostic data.Īs an admin, you can also troubleshoot these issues on your own.įirst, you might want to check if the issue is being caused by another software.

using procmon

If your system is having high CPU usage or performance issues related to the real-time protection service in Microsoft Defender for Endpoint, you can submit a ticket to Microsoft support.














Using procmon