Playbook for Repeat Detection
concept australia Updated Sep 10, 2026 1 min read playbook-repeat-detection.md
This playbook helps you determine if the incident response has been provided on an exact or similar phishing report in the past and automatically works on the new report similarly.
The Repeat Detection playbook checks if the newly reported phishing incident resembles a past incident. When the repeat detection is identified, the matched security incident and the resolution details are provided to the analyst, who can use it on the newly reported incident, resulting in a quick remediation of the security incident.
- Set up the Repeat Detection playbook
Use the following steps to set up the Repeat Detection playbook. - Use the Repeat Detection playbook
Use this playbook to investigate if the incident response has been provided on an exact or similar phishing report in the past and automatically works on the new report similarly. The following steps give you a walkthrough of the actions, tasks, and subflows that are available in the Repeat Detection playbook.
Parent Topic:Flow-based Playbooks
28 lines · 2.3 KB
--- title: Playbook for Repeat Detection description: This playbook helps you determine if the incident response has been provided on an exact or similar phishing report in the past and automatically works on the new report similarly. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/playbook-repeat-detection.html release: australia product: Security Incident Response classification: security-incident-response topic_type: concept last_updated: "2026-09-10" reading_time_minutes: 1 breadcrumb: [Flow-based Playbooks, Security Incident Response playbooks, Playbook Resources, Security Incident Response, Enterprise security case management applications, Security Operations] --- # Playbook for Repeat Detection This playbook helps you determine if the incident response has been provided on an exact or similar phishing report in the past and automatically works on the new report similarly. The Repeat Detection playbook checks if the newly reported phishing incident resembles a past incident. When the repeat detection is identified, the matched security incident and the resolution details are provided to the analyst, who can use it on the newly reported incident, resulting in a quick remediation of the security incident. - **[Set up the Repeat Detection playbook](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/playbook-setup-repeat-detection.md)** Use the following steps to set up the Repeat Detection playbook. - **[Use the Repeat Detection playbook](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/playbook-using-repeat-detection-playbook.md)** Use this playbook to investigate if the incident response has been provided on an exact or similar phishing report in the past and automatically works on the new report similarly. The following steps give you a walkthrough of the actions, tasks, and subflows that are available in the Repeat Detection playbook. **Parent Topic:**[Flow-based Playbooks](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/playbook-flow-based.md)
| title | Playbook for Repeat Detection |
| description | This playbook helps you determine if the incident response has been provided on an exact or similar phishing report in the past and automatically works on the new report similarly. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/playbook-repeat-detection.html |
| release | australia |
| product | Security Incident Response |
| classification | security-incident-response |
| topic_type | concept |
| last_updated | 2026-09-10 |
| reading_time_minutes | 1 |
| breadcrumb | Flow-based PlaybooksSecurity Incident Response playbooksPlaybook ResourcesSecurity Incident ResponseEnterprise security case management applicationsSecurity Operations |