CALDERA plugin exec

caldera → plugin → adversary <profile>

Executes a CALDERA adversary profile from the plugins, launching the profile's technique sequence against the agents.

Use it when you want to execute CALDERA adversary profiles with the plugins (the predefined profiles, the additional skills from the community plugins): the plugin provides the profile (the sequence of techniques with their variations) and the execution launches the adversary against the agents. It is the way to use the documented profiles (APT29, the ransomware one) without building them from scratch. In purple teaming, the plugins expand the repertoire: the group profiles and the new skills (the Atomic Red Team atomics integrated via plugin) — the operation with the plugin profile and the measured coverage.

Do not use it without reviewing the profile: the plugin profiles are generic — the techniques and their variations are reviewed before the operation (the scope, the noise). The community plugins vary in quality and maintenance: they are validated before trusting. And watch out: the profile execution generates real techniques — the lab is the place. Step-by-step verification requires telemetry to the SIEM. The plugin profile may include techniques you do not want to execute (destructive ones): profile review is mandatory before launching. Cleanup upon completion.