A logical CPU is a processing thread that an operating system can schedule work on. One physical processor core may expose one or more logical CPUs, depending on its architecture and features such as simultaneous multithreading. System monitors often calculate process CPU usage relative to one logical CPU, so a multithreaded program can show more than 100% when it runs across several threads.
In cyber security, logical CPU counts help put unusual activity in context. A miner or other unauthorized process may consume several logical CPUs, causing sustained high usage, heat, fan noise, or sluggish performance. A high percentage is a useful alert, not proof of compromise: compare the process with expected workloads, inspect its location and startup behavior, and review network activity using trusted system or endpoint tools.