inline (#1423)
| Sandcat | Mock | Manx | SSL | Stockpile | Atomic | Compass | Access | Response |
|---|---|---|---|---|---|---|---|---|
 |  |  |  |  |  |  |  |  |
Full documentation, training and use-cases can be found here
CALDERA is a cyber security framework designed to easily run autonomous breach-and-simulation exercises. It can also be used to run manual red-team engagements or automated incident response.
It is built on the MITRE ATT&CK™ framework and is an active research project at MITRE.
The framework consists of two components:
These requirements are for the computer running the core framework:
Start by cloning this repository recursively, passing the desired version/release in x.x.x format. This will pull in all available plugins.
git clone https://github.com/mitre/caldera.git --recursive --branch x.x.x
Next run the install.sh script. See the install docs for supported operating-systems.
./install.sh
Finally, start the server.
python server.py
You can now navigate to 127.0.0.1:8888 in a browser and log in with either red team (red:admin) or blue team (blue:admin) credentials.
There is also a Docker image for CALDERA.
Watch the following video for a brief run through of how to run your first operation.
Refer to our contributor documentation
In addition to CALDERA's open source capabilities, MITRE maintains several in-house CALDERA plugins that offer more advanced functionality. For more information, or to discuss licensing opportunities, please reach out to caldera@mitre.org or directly to MITRE's Technology Transfer Office.