The PROTECTIVE project aims to provide security teams (CERT, CSIRT) with a toolset enabling greater cyber defence capability through improved cyber situational awareness (CSA). In the poster we present results and lessons learned from the first pilot deployment of the PROTECTIVE system.