Forum Discussion
Improved Resource Management Control
Summary
Improved resource management control for plugins leveraging Windows Management Instrumentation (WMI) on Nessus Agent 11.1.0 or higher.
Impact
Customers with Nessus Agent 11.1.0 and later versions will have the ability to granularly control the CPU resources consumed during scans. This update ensures that plugins respect the resource usage setting selected during scan configuration by launching commands as children of the Nessus Agent, rather than invoking them via WMI. The release of these plugins will continue through January, with a phased approach over three weeks. The first release will be January 13th, the second January 20th, and the final planned plugin update on February 9th.
Target Release Date
Phase 1 plugin set: January 13, 2026
Phase 2 plugin set: January 20, 2026
Phase 3 plugin set: February 9, 2026
2 Replies
Will the CPU utilization cap also apply to the continuous assessment functionality?
Do these changes mean that we will finally have a way to create exceptions in EDR products like Microsoft Defender for Endpoint? To this point it's been impossible to exclude an agent scan from the Defender Attack Surface Reduction rules like 'Block process creations originating from PSExec and WMI commands' because each process was independent. If the plugins are now child processes under nessud.exe or another executable in the Agent, we may have a solution! Am I understanding the new functionality correctly? It would be great to see some information in updated documentation to describe the process tree changes.
