This seems similar to an issue raised by another user. To work out if it is and to help you I'll need a bit more information.
Could you post a screenshot of your Defence+ event logs (D+ ~ View Events), and your active process list (D+ ~ View active processes please?
There is a post
here in new member information that will guide you on making screenshots.
Also could you tell m if you are using standard CIS settings, or, if not how you have changed them.
Best wishes
Mouse