CAFCYBERCOM participates in Latvia-led Threat Hunt Workshop in Riga

April 10, 2026 - Defence Stories

Estimated read time - 1:49

By Major Christopher Daniel, Senior Public Affairs Officer, CAFCYBERCOM

The fourth Threat Hunt Workshop in Riga, Latvia, brought cyber defenders together with a clear goal: find and stop threats before they strike. The Canadian Armed Forces Cyber Command (CAFCYBERCOM) worked closely with Latvia's national cyber defence team, CERT.LV, to support this effort.

Bringing together 37 participants from 14 countries, the four-day workshop created a space where military and civilian cyber professionals could work shoulder to shoulder. For Canada, it was a chance to deepen an already strong partnership with Latvia while sharing operational experience in one of the most critical areas of modern defence.

"Cybersecurity is a global challenge," said Major Matt Giroux, Commander of Cyber Task Force 2 (CyTF-2)."Cyber threats do not respect borders. That is why collaboration like this is essential. We learn from each other, and we become stronger together."

Canadian personnel from the Canadian Armed Forces (CAF) worked closely with CERT.LV instructors to deliver a mix of classroom sessions and practical exercises. Participants were guided through real-worldscenarios, learning how to proactively search for threats rather than waiting for alarms to trigger.

Threat hunting focuses on identifying signs of malicious activity before they escalate into full incidents. During the workshop, international partners, including a CAF member, shared techniques drawn from their own operational experience. This included analyzing unusual network behaviour, tracking digital footprints, and applying tools designed to uncover hidden risks.

A central element of the workshop was the ongoing development of the Threat Hunt Playbook, a shared guide of tested methods and workflows. Canadian contributions helped refine the playbook with updated practices and practical insights, ensuring it remains useful in a rapidly evolving threat environment.

Rolands Heniņš, Head of Latvia's National Cybersecurity Centre, highlighted the value of the partnership. "This workshop reflects our strong cooperation with Canada. It is about taking action every day to find and reduce risks, not waiting for incidents to happen."

The collaboration between CAFCYBERCOM and CERT.LV also underscored the importance of cross-sector cooperation. With participants from both civilian and military organizations, the workshop reflected the reality that cyber defence extends beyond any single domain.

For Canada, the experience in Riga reinforces a broader commitment to collective defence and international engagement. By working alongside trusted partners, Canadian cyber specialists continue to strengthen their own capabilities while contributing to a more resilient global network.

As cyber threats grow more sophisticated, the message from Riga is clear. Strong partnerships, shared expertise, and proactive action remain some of the most effective tools in defending the digital space.