Understanding on-demand scan performance settings
Last Modified: 2023-11-23 03:43:34 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
As of May 14, 2024, Knowledge Base (KB) articles will only be published and updated in our new Trellix Thrive Knowledge space.
Log in to the Thrive Portal using your OKTA credentials and start searching the new space. Legacy KB IDs are indexed and you will be able to find them easily just by typing the legacy KB ID.
Understanding on-demand scan performance settings
Technical Articles ID:
KB55145
Last Modified: 2023-11-23 03:43:34 Etc/GMT Environment
Endpoint Security Threat Prevention (ENSTP) 10.x
Summary
Recent updates to this article
This article describes the following on-demand scanner (ODS) performance settings:
The Limit maximum CPU usage option on the Performance tab for the ODS limits the maximum amount of CPU that a scan consumes. This feature regularly looks at the operating system for CPU percentage used by the scan. This check is effectively identical to running command-line interface commands (for example, NOTES:
System utilization: The System utilization option on the Performance tab for the ODS enables the operating system to specify the amount of CPU time that a scan receives. This option maps to Windows Priority Control. The System utilization setting doesn't set a static percentage of CPU utilization or threshold for CPU used to perform an ODS. Instead, the operating system manages the amount of CPU resources that the ODS receives at any point in the scan process. The logic that Windows Priority Control uses keeps the CPU as busy as possible performing useful tasks. Windows Priority Control prioritizes CPU utilization to complete specific tasks in the shortest time possible, based on priority. Tasks must be prioritized to determine how available system resources are allocated. A core component of Windows Priority Control is the System Scheduler. The System Scheduler uses a Multilevel Feedback Queue algorithm to look at the priority, and the length of time needed to complete a task. Windows Priority Control allocates system resources based on this algorithm. When an ODS is set to run at Below Normal, it doesn't take CPU time from programs that run at Normal priority. If set to idle, it doesn't take CPU from any other task or process running at a higher priority. When an ODS occurs, Windows Priority Control allocates CPU time to the ODS. How Windows Priority Control allocates CPU is based on the Scheduling Priority for the running task. The task priority of the ODS can be set in the ODS task or policy under Performance, System utilization. For more information, see this Microsoft article on Windows Priority Control. NOTE: The priority doesn't apply to archive files if archive scanning is enabled. To view the priority of a task:
Related Information
Previous Document ID (Secured)
9197288
Affected ProductsLanguages:This article is available in the following languages: |
|