Uninstall MITRE Caldera

To uninstall Caldera, navigate to the directory where Caldera was installed and recursively remove the directory using the following command:

rm -rf caldera/

Caldera may leave behind artifacts from deployment of agents and operations. Remove any remaining Caldera agents, files, directories, or other artifacts left on your server and remote systems:

rm [ARTIFACT_NAME]

Generated reports and exfiled files are saved in /tmp on the server where Caldera is installed.

Some examples of Caldera artifacts left by agents (on server if agent ran locally, on clients if run remotely):

• sandcat.go: sandcat agent

• manx.go: manx agent

• nohup.out: ouput file from deployment of certain sandcat and manx agents