A financial services company wants to monitor credit card transactions for fraudulent activity.
The system must group all transactions by a specific user that occur closely together, but the time between these bursts of activity is unpredictable.
A new group should start only after a significant period of user inactivity.
Which windowing strategy is most suitable for this scenario?