Thanks for posting this. For a long time, I've had the opposite issue: detecting and disabling single users running multiple accounts. This is a much more com

Thanks for posting this. For a long time, I've had the opposite issue: detecting and disabling single users running multiple accounts. This is a much more comprehensive way I could narrow down where requests originate and then map that to clusters of user accounts.