Systems and methods are disclosed for identifying a person of interest exiting or entering an establishment. In an example, the system may derive a confidence factor that for an individual exiting an establishment based on image recognition and device identification technologies when the individual when a security event, such as an alarm, is set off. The system may also identify an individual entering an establishment as a person of interest based on the confidence score by using the same technologies.