Impossible Travel Detection via RDP Logon Sequences

Detects impossible travel by analyzing consecutive RDP logons from the same user across different countries using neighbor() to compare adjacent events in time.