The scenario wakes up on a schedule and runs apis in Elastic Security. Runs on its own, no manual copying.