Uninstall MITRE Caldera
To uninstall Caldera, navigate to the directory where Caldera was installed and recursively remove the directory using the following command:
rm -rf caldera/
Caldera may leave behind artifacts from deployment of agents and operations. Remove any remaining Caldera agents, files, directories, or other artifacts left on your server and remote systems:
rm [ARTIFACT_NAME]
Generated reports and exfiled files are saved in /tmp
on the server where Caldera is installed.
Some examples of Caldera artifacts left by agents (on server if agent ran locally, on clients if run remotely):
sandcat.go: sandcat agent
manx.go: manx agent
nohup.out: ouput file from deployment of certain sandcat and manx agents