Isolate a Computer

Sometimes you need to cut a computer’s connections quickly while you investigate. Isolation blocks both incoming and outgoing connections for that computer.

Isolate the practice computer:

seclab host practice-laptop isolate

You should see:

practice-laptop: isolate.

Test its outside route:

seclab probe demo-upload

You should see:

practice-laptop -> parcel-cache:443
Blocked: isolated

The reason is isolated. Its programs are still running and its files remain available to inspect. Isolation contains network activity; it does not clean the computer.

Approved connections from that computer are blocked too. Choose the affected computer carefully, keep unrelated services available and plan how it will return to work after cleanup.