what enables the Cisco Security MARS appliance to profile network usage and detect statistically significant anomalous behavior from a computed baseline?

Observe the following items carefully, what enables the Cisco Security MARS appliance to profile network usage and detect statistically significant anomalous behavior from a computed baseline?

A.
Cisco Security MARS Custom Parser

B.
Cisco Security MARS Global Controller

C.
NetFlow

D.
Cisco Security Manager