A system, comprising: a radio frequency, RF, sensor configured to detect RF signals; at least one memory that stores computer-executable instructions; and an RF controller operationally coupled to a transceiver and the at least one memory, wherein the RF controller is configured to access the at least one memory and execute the computer-executable instructions to: receive an RF fingerprint of an RF signal detected by the RF sensor within an area under surveillance, AUS, the RF fingerprint comprising at least one of: i) a hardware address of an electronic device that emitted the RF signal or ii) a radio type identifier of a radio of the electronic device, wherein the AUS is a physical area defined by one or more boundaries and the radio type identifier identifies a protocol or hardware associated with the radio; identify a first receive signal strength indicator, RSSI, value of the RF signal at the RF sensor at a first time; identify a second RSSI value of the RF signal at the RF sensor at a second time; determine a velocity of the electronic device based at least in part on the first RSSI value, the second RSSI value, and a span of time between the first time and the second time; determine that the velocity is greater than a threshold velocity value; determine, based at least in part on the first RSSI value and the second RSSI value, a direction of movement of the first electronic device toward an egress point of the AUS, wherein the egress point is a location associated with the one or more boundaries; and generate an alarm indicating that the velocity of the electronic device toward the egress point has been detected greater than the threshold velocity value. a radio frequency, RF, sensor configured to detect RF signals; at least one memory that stores computer-executable instructions; and an RF controller operationally coupled to a transceiver and the at least one memory, wherein the RF controller is configured to access the at least one memory and execute the computer-executable instructions to: receive an RF fingerprint of an RF signal detected by the RF sensor within an area under surveillance, AUS, the RF fingerprint comprising at least one of: i) a hardware address of an electronic device that emitted the RF signal or ii) a radio type identifier of a radio of the electronic device, wherein the AUS is a physical area defined by one or more boundaries and the radio type identifier identifies a protocol or hardware associated with the radio; identify a first receive signal strength indicator, RSSI, value of the RF signal at the RF sensor at a first time; identify a second RSSI value of the RF signal at the RF sensor at a second time; determine a velocity of the electronic device based at least in part on the first RSSI value, the second RSSI value, and a span of time between the first time and the second time; determine that the velocity is greater than a threshold velocity value; determine, based at least in part on the first RSSI value and the second RSSI value, a direction of movement of the first electronic device toward an egress point of the AUS, wherein the egress point is a location associated with the one or more boundaries; and generate an alarm indicating that the velocity of the electronic device toward the egress point has been detected greater than the threshold velocity value. receive an RF fingerprint of an RF signal detected by the RF sensor within an area under surveillance, AUS, the RF fingerprint comprising at least one of: i) a hardware address of an electronic device that emitted the RF signal or ii) a radio type identifier of a radio of the electronic device, wherein the AUS is a physical area defined by one or more boundaries and the radio type identifier identifies a protocol or hardware associated with the radio; identify a first receive signal strength indicator, RSSI, value of the RF signal at the RF sensor at a first time; identify a second RSSI value of the RF signal at the RF sensor at a second time; determine a velocity of the electronic device based at least in part on the first RSSI value, the second RSSI value, and a span of time between the first time and the second time; determine that the velocity is greater than a threshold velocity value; determine, based at least in part on the first RSSI value and the second RSSI value, a direction of movement of the first electronic device toward an egress point of the AUS, wherein the egress point is a location associated with the one or more boundaries; and generate an alarm indicating that the velocity of the electronic device toward the egress point has been detected greater than the threshold velocity value.