NCC-NL session: Cybersecurity lessons from Ukraine

The content of this page has been checked on 23 September 2026

Are you a cybersecurity specialist working in incident response, threat intelligence or digital forensics? Would like to learn first-hand from experts who defend against cybersecurity attacks under wartime conditions? Join NCC-NL on 10 November for an afternoon of workshops led by Ukrainian cybersecurity specialists. These experts will share practical lessons from one of the most intense cyber threat environments in the world. 

Date:
Tuesday 10 November 2026
12:30 - 18:00 hour (CEST)
Venue:
The Hague
NL
Attendee information:
  • The event will take place in English.
  • Places are limited.
  • Location: The Hague, exact place will be shared after registration.
Organiser:
  • NCC-NL

The event is hosted by the National Cybersecurity Coordination Centre of the Netherlands (NCC-NL).

For who?

This event is aimed at cybersecurity professionals who work hands-on with threat and incidents: incident responders, SOC and CERT analysts, threat intel specialists, digital forensics experts. Professionals from public and private organisations, research institutions and academia, as well as critical infrastructures are welcome.

Why attend?

Since the start of the Russian invasion, Ukraine has built up unique experience in detecting, investigating and responding to cyber-attacks under persistent pressure. This experience is highly relevant for cybersecurity organisations in the Netherlands and across Europe preparing for incidents. With this event, NCC-NL brings Dutch and Ukrainian cybersecurity experts together to exchange knowledge that comes straight from practice. You will leave with methods and insights that you can apply in your own organisation.

The programme offers a plenary part followed by two rounds of workshop sessions. The day ends with a social event, offering drinks and a bite to support informal acquiantences.

Programme

  • 12:30 - 13:00 hour
    Walk-Inn lunch
  • 13:00 - 13:10 hour
    Plenary opening
  • 13:10 - 13:30 hour
    Keynote
  • 13:30 - 13:45 hour
    Break
  • 13:45 - 16:30 hour
    Workshops
  • 16:30 - 16:40 hour
    Closing speech
  • 16:40 - 18:00 hour
    Reception

Workshops

Session 1 Investigate, Decide, Respond – A live DFIR workshop 
Session 2 From Infostealer Logs to Actionable CTI: Detecting Compromised Access Before an Attack 
Session 3 Digital Forensics Under Pressure: Reconstructing a Real-World Cyber Incident in Ukraine. 

Registration

To register, please fill in the online form. Places are limited. First come, first served.

Please mail ncc-nl@rvo.nl for further questions. If you would like to be informed on future events from NCC-NL please subscribe to our newsletter.

Is part of:
Innovation, research and patents