correlate-ioc - Correlate IOCs with SIEM Alerts and SOAR Cases
Check existing SIEM alerts and case management entries related to Indicators of Compromise
Tags
Updated: 2026-02-13Capabilities
Typical Inputs
Typical Outputs
What this skill does
- search security alerts
- query case entries
- check IOC indicators
- correlate security data
Inputs
- IOC list
- time frame parameter
- case filter criteria
- security platform
Outputs
- SIEM alerts summary
- SOAR cases summary
- correlation status
- malicious confidence level
Requirements
- Chronicle viewer role
- SOAR editor role
- security operations environment
- SIEM platform access