---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Playbook for Repeat Detection

# Playbook for Repeat Detection {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

This playbook helps you determine if the incident response has been provided on an exact or similar phishing report in the past and automatically works on the new report similarly.

The Repeat Detection playbook checks if the newly reported phishing incident resembles a past incident. When the repeat detection is identified, the matched security incident and the resolution details are provided to the analyst, who
can use it on the newly reported incident, resulting in a quick remediation of the security incident.
* **[Set up the Repeat Detection playbook](https://servicenow-prod.fluidtopics.net/3SMfH1HSAhhksBEt1MtvVw)**   
  Use the following steps to set up the Repeat Detection playbook.
* **[Use the Repeat Detection playbook](https://servicenow-prod.fluidtopics.net/u6uzLiBazKc3mRm6VBZTYw)**   
  Use this playbook to investigate if the incident response has been provided on an exact or similar phishing report in the past and automatically works on the new report similarly. The following steps give you a walkthrough of the actions, tasks, and subflows that are available in the Repeat Detection playbook.