I'd use Process Explorer to isolate exactly what service is causing the spike. Is it the same app every time, or do certain apps spike a Service?

Read about using Process Explorer here: Using Process Explorer to tame svchost.exe - Advanced topics | Defensive Computing - CNET News