Uninstall MITRE Caldera

To uninstall Caldera, navigate to the directory where Caldera was installed and recursively remove the directory using the following command:

rm -rf caldera/

Caldera may leave behind artifacts from deployment of agents and operations. Remove any remaining Caldera agents, files, directories, or other artifacts left on your server and remote systems:


Generated reports and exfiled files are saved in /tmp on the server where Caldera is installed.

Some examples of Caldera artifacts left by agents (on server if agent ran locally, on clients if run remotely):

  • sandcat.go: sandcat agent

  • manx.go: manx agent

  • nohup.out: ouput file from deployment of certain sandcat and manx agents