Session monitoring and anomaly detection

[Floppy]

Suggested by security audit in #2235

Implement session monitoring and anomaly detection to identify and prevent suspicious session activities.