Building a real-time aircraft anomaly pipeline: separating bad telemetry from suspicious movement — PLINKFEED