Systems and methods can support detecting and identifying threats associated with wireless devices within an electromagnetic environment. One or more sensor antennas may be located within the electromagnetic environment. Radio frequency signals may be coupled from the sensor antennas into a radio receiver. The radio receiver can communicate data samples representing a portion of the radio frequency signal to a raw signal analysis engine. The raw signal analysis engine can identify features associated with a communicated signal within the data samples. The raw signal analysis engine can classify modulation features and decode information features from the communicated signal. Feature vectors may be generated comprising the data samples and the identified features associated with the data samples. The feature vectors can be transmitted to a signal aggregation and analysis engine to support detecting and identifying electromagnetic threats and to support associated operator interfaces.