check-duplicates - Case Duplicate Detection for Incident Investigation
Check for duplicate or similar existing cases before starting deep analysis
Tags
Updated: 2026-02-11Capabilities
Typical Inputs
Typical Outputs
What this skill does
- execute similarity check
- process results
- extract similar case IDs
Inputs
- CASE_ID
- ALERT_GROUP_IDENTIFIERS
- DAYS_BACK parameter
- INCLUDE_OPEN parameter
- INCLUDE_CLOSED parameter
Outputs
- list of similar case IDs
- similarity check status
Requirements
- SOAR platform
- chronicle.editor role access
- security operations environment