Forum Discussion
Very High Increase in CPU activity after Update Microsoft Defender for Identity sensor
All our servers that are running this sensor (DCs, Certificate servers, AD Connect servers) showed a massive increase in average CPU utilization from virtually straight after the sensor was automatic...
The automatic update to version 2.254.19112.470 took place around 11.45pm UK time on January 12th 2026.
Sorry - that install date was in the title but I had to delete it - then I couldn't edit the post to add it back in.