Dive past Task Manager to see per-process disk writes, open handles, and the remote IPs a service is contacting.
If Task Manager is showing wrong uptime in Windows 11, disable Fast Startup, verify uptime via WMIC, restart WMI service, ...