How does QRadar extract user identity information from network flows?

Question

$1$

Select one:

By using AQL queries on Offense data

By normalizing the log source data fields

By extracting the information from the network payload

By extracting the information from the asset database for a particluar asset