Stop the Program

The evidence is saved. You can now stop the unwanted program without losing the original record. Stopping a process ends its current activity; it does not remove its file.

On the practice computer, stop the helper:

seclab process demo-helper stop

You should see:

demo-helper: stopped.

Check its record again:

seclab inspect processes demo-helper

Look for these lines:

demo-helper:
  Running: no

Running now says no. The browser is a separate process, so it keeps running. This is why identifying the right process matters: stopping everything would interrupt useful work too.

A stopped program may still be able to start again. We will deal with its file and startup settings next.