Which option is correct about the case management feature of Cisco Security MARS?

Which option is correct about the case management feature of Cisco Security MARS?

A.
It is used in conjunction with the Cisco Security MARS incident escalation feature for incident reporting.

B.
It is used to capture, combine, and preserve user-selected Cisco Security MARS data within a specialized report.

C.
It is used to automatically collect and save information on incidents, sessions, queries, and reports dynamically without user interventions.

D.
It is used to very quickly evaluate the state of the network.