A Mallows-like Criterion for Anomaly Detection with Random Forest Implementation