Check Normal Work

A stopped attack is only part of recovery. Staff and customers also need their normal work to succeed.

Lumen groups related connections into operations. Checkout needs both an order connection and a payment connection. Inspect it:

seclab inspect operations demo-sale

You should see:

demo-sale:
  Description: Accept a shop order and its payment
  Connections: [
  "demo-order",
  "demo-payment"
]
  Working: yes

Working: yes means both required connections are currently available. If either one is blocked, the operation says no. This gives you a useful check after changing a program or a network rule.

An operation check describes what works now. It does not erase a past data loss or prove that every computer is clean. Combine it with the cleanup checks you already know.