1. A networked system for physical intrusion detection/alarm monitoring comprises; one or more computing devices, comprising processor devices and memory in communication with the processor devices, configured to: receive sensory inputs from credentials or badges affixed to individuals containing wireless network nodes within a monitored premises; determine virtual groups of individuals associated with the received credential data by determining from the received inputs relative proximity of individuals to each other over periods of time; store the determined virtual groups of individuals into a list of tag locations as grouping information; modify the grouping information over time frames of configurable duration, based on the virtual groupings by changing the list of tag locations for each virtual group as virtual group membership changes; and apply rules set to the grouping information to track and detect individuals within the virtual group.