https://cybertoolchain.io/tools/caldera New releases and features in caldera, tracked by The Cyber Toolchain. en Thu, 24 Apr 2025 17:51:59 GMT https://github.com/mitre/caldera/releases/tag/5.3.0 https://github.com/mitre/caldera/releases/tag/5.3.0 Thu, 24 Apr 2025 17:51:59 GMT Caldera 5.3.0 refactors Docker setup for easier deployment and filters zero-score facts from operation sources. • Refactored Docker setup following containerization best practices, making Caldera easier to deploy. • Filters zero-score facts from operation sources, reducing noise in fact management during operations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/caldera https://github.com/mitre/caldera/releases/tag/5.1.0 https://github.com/mitre/caldera/releases/tag/5.1.0 Tue, 25 Feb 2025 22:56:33 GMT Caldera 5.1.0 adds payload management UI, cron-based schedule management, planner update API, and AD user format support. • New payload management feature lets operators manage payloads through the Caldera UI. • Adds cron-based schedule management, with API support for creating and updating schedules. • New API functionality to update planners via the REST API. • Adds `user_format_string` setting to support Active Directory user authentication. • Adds Rich logging and build warnings for improved operator visibility during startup. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/caldera https://github.com/mitre/caldera/releases/tag/5.0.0 https://github.com/mitre/caldera/releases/tag/5.0.0 Wed, 14 Feb 2024 14:55:55 GMT Caldera 5.0.0 adds a `--build` flag for UI builds, drops Python 3.7, and introduces a new Emu plugin. • Requires the `--build` flag on the first run to compile the VueJS UI • Drops support for Python 3.7 • Includes a new Emu Plugin with a Turla adversary emulation plan Breaking changes: • Drops support for Python 3.7 • The `--build` flag is now required on the first run to build the VueJS UI Full history on Cyber Toolchain: https://cybertoolchain.io/tools/caldera https://github.com/mitre/caldera/releases/tag/4.2.0 https://github.com/mitre/caldera/releases/tag/4.2.0 Mon, 19 Jun 2023 21:28:12 GMT Adds Naive Bayes planner and new event types (agent/added, fact/added); changes Link API payload structure • `Naive Bayes` planner selects next action based on highest probability of success from historical data • Universal and Existential `requirements` check facts against the entire knowledge base • New eventing system events: `agent/added`, `fact/added`, `fact/updated`, `system/ready` • Link results now return `stdout` and `stderr` separately as a dictionary in API responses • Adversary profile page displays the Adversary ID for the selected adversary Breaking changes: • Link results payload changed: `stdout` and `stderr` are now returned separately as a dictionary instead of concatenated or stringified Full history on Cyber Toolchain: https://cybertoolchain.io/tools/caldera https://github.com/mitre/caldera/releases/tag/4.0.0 https://github.com/mitre/caldera/releases/tag/4.0.0 Tue, 14 Jun 2022 15:14:10 GMT CALDERA 4.0 introduces REST API v2, new Sandcat executors (proc, native), and C2 channels (SSH, FTP, Slack). • `REST API v2` with Swagger docs is available alongside the previous API version. • Sandcat agents can now use the `proc` executor to directly spawn desired processes. • Sandcat agents support the `native` executor for performing TTPs through pure Golang. • New Sandcat C2 channels are supported: SSH tunneling, FTP, and Slack. Breaking changes: • JQuery has been removed from the front-end; any custom plugins or scripts relying on it will break in the new UI. • Timestamps in Sandcat agents now use UTC instead of local time, which may affect how logs and timestamps are parsed by existing integrations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/caldera https://github.com/mitre/caldera/releases/tag/4.0.0-beta https://github.com/mitre/caldera/releases/tag/4.0.0-beta Mon, 31 Jan 2022 23:17:45 GMT CALDERA 4.0 beta adds in-place command editing and full fact template selection for potential links. • Adds the ability to edit a command before adding it when creating a potential link • Allows selecting fact values for all fact templates in a potential link from both a fact source or collected operation facts • Changes Sandcat agent timestamps to use UTC instead of local time Full history on Cyber Toolchain: https://cybertoolchain.io/tools/caldera