CERT-EU is the Computer Emergency Response Team (CERT-EU) for the EU institutions, agencies and bodies. It provide support for around 60 organisations regarding targeted cyber threat. In this presentation we will go through an incident based on real cases and details how the teams in CERT-EU works internally and interact with constituents, peers and partners. The focus is made on processes, tools and information sharing including: Cyber Threat Intelligence database and sharing Threat Hunting on constituents networks Security Operation Center Tools and resources provided to EU institutions, agencies and bodies Relations with peers and partners Documents and analysis provided by CERT-EU