Hi @Sakshi Singh , it looks like these are used for data collection by Microsoft Defender for Cloud. Microsoft Defender for Cloud collects data from your virtual machines (VMs) to assess their security state, provide security recommendations, and alert you to threats. When you first access Defender for Cloud, data collection is enabled on all VMs in your subscription. Microsoft Defender for Cloud collects and processes security-related data, including configuration information, metadata, event logs, crash dump files, and more. If excluding the C:\ProgramData\Microsoft\Windows Defender Advanced Threat Protection\DataCollection location from scanning resolves the memory consumption issue, it is possible that the scanning of these files is causing the issue. We can always open a ticket to look at your environment if this is the case. Please let me know if you have any questions and I can help you further. If this answer helps you please mark "Accept Answer" so other users can reference it.
Thank you,
James