Which subcategory of the Detect Function does this activity support?

An organization’s security team is analyzing logs from its Security Information and Event Management (SIEM) system to identify unusual patterns.

Which subcategory of the Detect Function does this activity support?
A . Detection Processes
B . Anomalies and Events
C . Continuous Monitoring
D . Security Awareness

Answer: B