A method and apparatus are provided for identifying wireless devices within a security system. The method includes the steps of providing a security system monitoring a secured area for an intruder, the security system detecting an intrusion of the secured area, the security system detecting a mobile device within the secured area, the security system retrieving an identifier of the intruder from the mobile device and the security device saving the identifier along with a record of the intrusion.