1. A computer implemented method for generating an expected behavior model, the computer implemented method comprising: parsing event data derived from video data to identify behavioral patterns, wherein the event data comprises metadata describing events occurring in a selected environment; analyzing the behavioral patterns to identify a set of expected behavioral patterns occurring in the selected environment; and generating the expected behavioral model using the expected behavioral patterns.