I am on ZCM 10 SP2. When user complaints about analyze.exe uses lots of CPU time and PC slows down, what entries will be entered to the zmd-messages.log on the managed devices. I want to see if I can tell exactly how long the scan runs.

Will subsequent scans finish faster?

I don't necessary apply all the latest MS updates immediately but I feel the overhead on the PCs.