Logging and Cybersecurity are bloaty areas as well. I've seen plenty of AWS cost breakdowns where the cybersec functions were the highest percentage of spend. Or desktops where carbon black, or windows defender were using most of the CPU or IO cycles. And networks where syslog traffic was the biggest percentage of traffic.
Norton, Symantec, and McAfee contribute greatly to global warming in the financial services sector. At least half of CPU cycles on employee laptops are devoted to them.
But do they actually work? For years I've been of the opinion that most anti-virus solutions don't actually stop virusses, instead they give you a false sense of security and their messaging is intentionally alarmist to make individuals and organizations pay their subscription fees.
In my limited and sheltered experience, the only viruses I've gotten in the past decade or so was from dodgy pirated stuff or big "download" button ads on download sites.
Well and a fair amount of cybersec oriented services are a pattern of "sniff and copy every bit of data and do something with it" or "trawl all state". Which is inherently heavy.
