SYSTEM AND METHOD OF DYNAMIC CORRELATION VIEW FOR CLOUD BASED INCIDENT ANALYSIS AND PATTERN DETECTION

A method and apparatus including a cloud server saving a plurality of security events that occurred within a secured area where each saved security event includes an identifier on a device or person monitored by the security system, an identifier of the monitoring function that triggered the saving of the event in the cloud and a time of the event, a user input receiving an identifier of the monitored device or person and at least two different functions monitored by the security system and a processor downloading information of some of the plurality of saved events identified by the received identifiers from the cloud server and presenting the downloaded information of each event at corresponding locations along a timeline.