Performance Troubleshooting
Use evidence to decide whether CPU, memory, disk or network is actually constrained.
Resource triage
CPU
Check utilization, cores, speed, then identify top CPU processes.
Memory
Check used, available and committed memory; identify top consumers.
Disk
Check active time, throughput, response time and free space.
Network
Check send/receive activity and continue into DNS/port/firewall when needed.
Scenario: C: drive 98% full
Confirm usage
→Find consumer
→Check logs
→Check backups/temp
→Identify abnormal growth
→Clean safely
→Verify
Do not teach: “Find the largest folder and delete it.” It may contain databases, backups, application data or evidence.
C:\Windows\Temp
C:\Windows\Logs
C:\inetpub\logs
C:\ProgramData
C:\Users