Return to Service

During an investigation, IT may isolate a computer. Isolation cuts its network connections, including approved ones. Cleaning the computer does not automatically reconnect it.

Suppose the practice computer has been cleaned and IT has approved its return. Reconnect it:

seclab host practice-laptop reconnect

You should see:

practice-laptop: reconnect.

Then check the unwanted process:

seclab inspect processes demo-helper

Look for these lines:

demo-helper:
  Running: no

It remains stopped. Reconnecting restores network access; it does not remove quarantine or enable a disabled startup entry.

Only return a computer when the investigation supports it. Check that approved work resumes and the unwanted activity stays blocked. The next section will explore isolation and network routes in more detail.