---
title: "Discussion on \"Finding the Filter Driver Behind High CPU in Unrelated Windows Processes\" | Hashnode"
description: "Discussion on \"Finding the Filter Driver Behind High CPU in Unrelated Windows Processes\". This post first appeared on the ET Ducky blog. I build ET Ducky, an RMM that reads ETW on Windows and eBPF on Linux.\nWhen a monitoring agent, powershell.exe, and Process Explorer all show high CPU at"
url: "https://hashnode.com/posts/finding-the-filter-driver-behind-high-cpu-in-unrelated-windows-processes/6af27ae0514d9b5d2362bedb"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Finding the Filter Driver Behind High CPU in Unrelated Windows Processes](https://etducky.hashnode.dev/finding-the-filter-driver-behind-high-cpu-in-unrelated-windows-processes?utm_source=hashnode&utm_medium=feed)

This post first appeared on the ET Ducky blog. I build ET Ducky, an RMM that reads ETW on Windows and eBPF on Linux. When a monitoring agent, powershell.exe, and Process Explorer all show high CPU at

1d ago · 5 min read · etducky.hashnode.dev  
Read the article

-   [#windows](https://hashnode.com/tag/windows)
-   [#troubleshooting](https://hashnode.com/tag/troubleshooting)
-   [#powershell](https://hashnode.com/tag/powershell)
-   [#sysadmin](https://hashnode.com/tag/sysadmin)

## Written by

[Christopher Smith](https://hashnode.com/@et-ducky)

@et-ducky

  
[View profile](https://hashnode.com/@et-ducky)

## Responses

Markdown supported · ⌘↵ to post

No responses yet.