The scenario catches new leads in Salesforce and creates comments in Elastic Security. Runs on its own, no manual copying.