If the system has not been powered off yet, the hard drive may spin briefly after the system has been prepared for shutdown. There should be no network traffic coming from the IDS at this point. All activity will cease once the system is powered off.