After spending a fun morning with extended events and Process Monitor I've not been able to identify any SQL-related activity at all around these spikes so I'm going to ignore...
We're not log shipping; it used to run mirrored on a pair of small servers but we stopped doing that (caused a lot more problems than it ever solved) shortly...