Issue with Sophos Endpoint Intercept X Advanced for Server on Windows Server 2022 HyperV Guests

Have you confirmed that Microsoft Defender is disabled or in passive mode? On Windows 10, it gets disabled automatically when Sophos is installed. On servers, it does not.

Have GPO configured to disable Windows Defender and also registry entry to enforce passive mode

Have GPO configured to disable Windows Defender and also registry entry to enforce passive mode

so no process "MsMpEng" running?

also please post the installed versions of your Sophos Server Endpoint - they may vary from customer to customer.

have you already followed Sophos User930 's suggestion . That user is very skilled and often the hints bring you very close to the root cause.

Procmon dumps may also help you.

Also I'd suggest to disable one Sophos component by another and see if that changes the high CPU.

support.sophos.com/.../KB-000036572