Forum Discussion
Very High Increase in CPU activity after Update Microsoft Defender for Identity sensor
- Jan 20, 2026
Hi,
Ack on that.
We spotted the issue. in some sensors a thread might hog between 0 to 100% of a single core.
We are working on a fix.
Note that the sensor has a job limiter which should make sure to leave at least 15% of CPU free at all times,
It will limit CPU usage down to 10% of total machine if needed (with the price of dropping traffic) , so if you are really hitting 100% CPU please check if there is something else that is also consuming the CPU which was not expected.
Our MS support call was answered pretty quickly. I have had to provide some diagnostic logs for them but they did mention other customers had reported something similar.
From my experience when you get an immediate change in behaviour to all servers an app was updated on it usually points to some change in the build ... planned or unplanned.