Windows logon type 10 is RemoteInteractive, the logon type used by Remote Desktop. The query removes non-public address ranges, derives geographic data from the remaining remote IPv4 addresses, and uses worldMap() to plot those locations with event counts as marker magnitude.
Community Discussion