A computer implemented method, apparatus, and computer usable program code for detecting behavioral deviations in members of a cohort group. In one embodiment, a member of a cohort group is identified. Each member of the cohort group shares a common characteristic. Respiratory metadata associated with the member of the cohort group is received in real-time as the respiratory metadata is generated. The respiratory metadata describes respiration associated with the member of the cohort group. Patterns of respiratory changes are identified using the respiratory metadata. The respiratory metadata is analyzed to identify the patterns of respiratory changes. In response to the patterns of respiratory changes indicating behavioral deviations in the member of the cohort group, the member of the cohort group is identified as a person of interest.