JD Tech

Sep 26, 2018 · Operations

Root Cause Analysis and Mitigation of Sysmon High CPU and Memory Usage

This article investigates why the Sysinternals Sysmon monitoring tool occasionally consumes an entire CPU core and rapidly increases memory usage, analyzes thread creation, handle explosion, and registry settings, reproduces the issue on any machine, and proposes practical solutions to stop the recursive behavior.