Resources consumed by defender for endpoint

Copper Contributor

How much resources (CPU, RAM, network bandwidth) does defender for endpoint consume?


I think the network bandwidth was 5MB per day, but the notation is missing from the help.

2 Replies

@mmm70707  The data transfer or daily average bandwidth of 5 MB is used to communicate with the MDE cloud service when you use the full capabilities of Defender for endpoint

This will vary quite a bit depending on what settings you have enabled. I can say that the primary MDE process sensendr.exe can hover at arounds 10-20% CPU if you have network discovery enabled, significantly less if you disable it. That's the process that does all the network inspection, so it will add some extra CPU regardless. In total around 100 MB of RAM, not too bad. But other's observations will vary if they have more functions enabled.