This message was deleted.

Hi Chris, the "services" session is a OS based session where you usually find the processes from the services. So you will usually find all svchost.exe, WmiPrvSE, etc. inside this session... If you double click the "services" session you can drill down into that specific session to see which process is causing the issue... If svchost.exe is going nuts you can give "Display SvcHost processes" script action a chance to identify which service went wild: https://www.controlup.com/script-library-posts/display-svchost-processes/

Thanks @Markus Zehnle !