The scenario wakes up on a schedule and creates tags in Elastic Security. Runs on its own, no manual copying.