Open Task Manager, find the IIS Worker Process that takes a lot of CPU
Right-click that process and select Go to details:
Check who is the user running that process under the User name column (it is "AccessPortal" in the following sample screenshot):
Go to IIS Manager, Application Pools, find the pool with that name, right-click on it and select View Applications:
Check what is the name of the Site that runs on that application pool (it is "AccessPortalBastion" in the following sample screenshot):
Open sites list in IIS manager (by clicking on Sites folder in the left panel) and check what is the id of the needed site (it is "2" in the following sample screenshot):
Last step: go to C:\Inetpub\logs\LogFiles and select folder W3SVCN where N is the id found in the previous step (like W3SVC2). Copy log file from the date the IIS was low and file from the date it is high.
Thank you!
Note: If there are more than one applications in step 5 – please perform next steps 5-7 for each one of the applications