1. A method comprising: monitoring a plurality of sensors including at least one door switch that detect threats within a secured area; detecting a plurality of at least three events within the secured area detected by respective sensors of the plurality of sensors that have been activated within a predetermined time period of one another, wherein at least one of the plurality of at least three events is an alarm event; ordering the plurality of at least three events based upon a reporting time of each of the plurality of at least three events; correlating the ordered plurality of at least three events based upon time, location, and distance between the ordered plurality of at least three events, wherein the distance is a variable distance value calculated by a corresponding processor, wherein the variable distance value between the ordered plurality of at least three events increases with the time based upon a normal walking speed of an intruder measured from a time of activation of a first of any two of the ordered plurality of at least three events, and wherein the variable distance value is correlated to an actual distance between the ordered plurality of at least three events because the intruder could have traveled from the location of one of the ordered plurality of at least three events to a next of the ordered plurality of at least three events; displaying the correlated, ordered plurality of at least three events automatically in response to detecting the alarm event; and displaying a map showing the respective sensors of the plurality of sensors that have been activated within the predetermined time period of one another within the secured area along with a potential route of the intruder traveling among the location of the respective sensors of the plurality of sensors that have been activated within the predetermined time of one another in accordance with the distance and the reporting time of each of the plurality of at least three events.