Is pulling the power cable the same as shutting down?¶

No. Orderly shutdown allows software to close and write data; cable removal interrupts external power but may stop activity abruptly - or may not stop the device at all.

The resulting system states differ¶

Orderly shutdown can create logs, save application state, synchronise services and terminate sessions. Sudden power loss can destroy memory, interrupt storage writes and corrupt files or services.

A laptop may continue on battery. A desktop or server may use an uninterruptible supply or second feed. Before touching a cable, record all power sources, connections and the live display.

Device role matters. Pulling power from network, storage or embedded equipment can affect multiple systems and users. It may also remove the very logs and active connections needed to understand an incident.

Choose and attribute the method¶

Do not disconnect equipment merely because it appears suspicious. Define the safety, containment or preservation objective and obtain specialist advice when the consequences are uncertain.

If urgent necessity requires immediate removal, use the least destructive effective action. Record who acted, the exact cable or control, the time and what remained powered afterwards. A precise record prevents “power removed” from concealing a more complicated transition.