To uninstall CALDERA, navigate to the directory where CALDERA was installed and recursively remove the directory using the following command:

rm -rf caldera/

CALDERA may leave behind artifacts from deployment of agents and operations. Remove any remaining CALDERA agents, files, directories, or other artifacts left on your server and remote systems:


Generated reports and exfiled files are saved in /tmp on the server where CALDERA is installed.

Some examples of CALDERA artifacts left by agents (on server if agent ran locally, on clients if run remotely):

  • sandcat.go: sandcat agent

  • manx.go: manx agent

  • nohup.out: ouput file from deployment of certain sandcat and manx agents