Well, it depends on what he does... if extra processes are running, that's a good thing to look for.