{"id":22316,"date":"2026-02-23T20:49:16","date_gmt":"2026-02-23T20:49:16","guid":{"rendered":"https:\/\/www.europesays.com\/dk\/22316\/"},"modified":"2026-02-23T20:49:16","modified_gmt":"2026-02-23T20:49:16","slug":"canada-and-latvia-lead-nato-threat-hunting-workshop-in-riga","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/dk\/22316\/","title":{"rendered":"Canada and Latvia Lead NATO Threat Hunting Workshop in Riga"},"content":{"rendered":"<p>November 17, 2025 \u2013 Defence Stories<\/p>\n<p>Estimated read time \u2013 2:15<\/p>\n<p>By Major Christopher Daniel, CAFCYBERCOM Senior Public Affairs Officer<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.europesays.com\/dk\/wp-content\/uploads\/2026\/02\/11-17-nato-workshop-img1.jpg\" alt=\"Group photo of Canadian and Latvian representatives, including the Canadian Ambassador and Latvian Ministry of Defence official at the centre, standing in front of Canadian and Latvian flags with CyTF 2 and CERT.LV personnel.\" class=\"img-responsive\"\/>Caption<\/p>\n<p class=\"small\">In the centre, His Excellency Brian Szwarc, Ambassador of Canada to Latvia, and\u00a0Ms.\u00a0Ieva\u00a0Krekovska, Director of the Cybersecurity Policy Department at the Latvian Ministry of Defence, open the Threat Hunting Workshop alongside members of CyTF\u00a02 and\u00a0CERT.LV.<\/p>\n<p>When cyber threats strike, the ability to hunt them down can make all the difference.<\/p>\n<p>From November 4 to 7, Canadian and Latvian cyber experts brought that capability to NATO allies in Riga, leading a four-day Threat Hunting Workshop designed to turn analysts into proactive defenders, capable of spotting threats before they strike.<\/p>\n<p>The Threat Hunting Workshop was formally opened by His Excellency Brian Szwarc, Ambassador of Canada to Latvia, and Ms.\u00a0Ieva\u00a0Krekovska, Director of the Cybersecurity Policy Department at the Ministry of Defence of Latvia.<\/p>\n<p>Organized jointly by the Latvian Ministry of Defence, the Cyber Incident Response Institution of the Republic of Latvia\u00a0(CERT.LV), and the Canadian Armed Forces\u00a0(CAF) Cyber Command, the workshop welcomed junior- to senior-level analysts from ten NATO and European countries, alongside representatives from CERT.EU. Participants came from both military and civilian organizations, reflecting the growing need for cross-sector collaboration in cybersecurity.<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.europesays.com\/dk\/wp-content\/uploads\/2026\/02\/11-17-nato-workshop-img2.jpg\" alt=\"Close-up of the Threat Hunt Playbook with a pen and a CERT.LV notebook on a table, showing the collaboration between Latvia and Canada.\" class=\"img-responsive\"\/>Caption<\/p>\n<p class=\"small\">The Threat Hunt Playbook, developed jointly by\u00a0CERT.LV and\u00a0CAFCYBERCOM, was used as the primary training resource during the workshop.<\/p>\n<p>\u201cThis workshop is the result of close collaboration between CyTF-2 and CERT.LV, continually evolving with insights from our joint operations,\u201d said Lieutenant-Commander Jonathan Timmins, Commander of Cyber Task Force 2 (CyTF-2). \u201cWe\u2019re\u00a0bringing the full weight of Canadian and Latvian expertise to the classroom, combining lessons from real-world operations to give participants the most current and actionable threat-hunting practices.\u201d<\/p>\n<p>The workshop blended daily lectures with immersive lab exercises using live data and open-source tools such as Velociraptor. Analysts focused on proactive threat hunting, identifying suspicious activity, validating threats, and sharing intelligence before adversaries can act.<\/p>\n<p>Major Stephen McKeon, Team Lead of the CAF Aviation Cybersecurity Test Team, explained why this approach is critical: \u201cProactive threat hunting allows us to find and neutralize adversaries before they achieve their objectives. It\u2019s about maintaining initiative in the cyber domain and continuously improving our security posture to stay ahead of evolving threats.\u201d<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.europesays.com\/dk\/wp-content\/uploads\/2026\/02\/11-17-nato-workshop-img3.jpg\" alt=\"Canadian and Latvian officials, including the Canadian Ambassador and Latvian Ministry of Defence representative, stand in front of Canadian and Latvian flags while speaking to workshop participants during the Threat Hunting Workshop opening in Riga.\" class=\"img-responsive\"\/>Caption<\/p>\n<p class=\"small\">His Excellency Brian Szwarc, Ambassador of Canada to Latvia, and\u00a0Ms.\u00a0Ieva\u00a0Krekovska, Director of the Cybersecurity Policy Department at the Latvian Ministry of Defence, address participants at the opening of the Threat Hunting Workshop in\u00a0Riga, alongside members of CyTF\u00a02 and\u00a0CERT.LV.<\/p>\n<p>This year\u2019s workshop expanded content on Linux-based environments and added more hands-on exercises. Updates to the Threat Hunt Playbook, a living repository of tactics, techniques, and tools, incorporated new artifacts, detection workflows, and automation to reflect the latest threat landscape.<\/p>\n<p>For Latvia, hosting and teaching the workshop strengthens national cyber capabilities at NATO\u2019s eastern frontier. \u201cCollaboration is essential in cyber defense,\u201d said Mr.\u00a0Rudolfs\u00a0Kelle, CERT.LV Threat Hunting Lead. \u201cBy sharing timely and relevant information, NATO partners can detect, understand, and counter emerging threats more effectively than any nation could on its own.\u201d<\/p>\n<p>Through joint instruction, Canada and Latvia are helping NATO allies sharpen practical skills, build trust, and enhance collective readiness. As\u00a0cyber threats continue to evolve, this partnership proves that shared expertise is more than a defensive tool, it\u2019s a force multiplier, transforming knowledge into action and reinforcing NATO\u2019s cyber resilience for years to come.<\/p>\n","protected":false},"excerpt":{"rendered":"November 17, 2025 \u2013 Defence Stories Estimated read time \u2013 2:15 By Major Christopher Daniel, CAFCYBERCOM Senior Public&hellip;\n","protected":false},"author":2,"featured_media":22317,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[91],"tags":[15083,15084,169,74,12028,168,15085],"class_list":{"0":"post-22316","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-riga","8":"tag-cafcybercom","9":"tag-cert-lv","10":"tag-latvia","11":"tag-nato","12":"tag-operations","13":"tag-riga","14":"tag-threat-hunting-workshop"},"share_on_mastodon":{"url":"","error":""},"_links":{"self":[{"href":"https:\/\/www.europesays.com\/dk\/wp-json\/wp\/v2\/posts\/22316","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/dk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/dk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/dk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/dk\/wp-json\/wp\/v2\/comments?post=22316"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/dk\/wp-json\/wp\/v2\/posts\/22316\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/dk\/wp-json\/wp\/v2\/media\/22317"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/dk\/wp-json\/wp\/v2\/media?parent=22316"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/dk\/wp-json\/wp\/v2\/categories?post=22316"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/dk\/wp-json\/wp\/v2\/tags?post=22316"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}