1. A method comprising: receiving first motion data corresponding to a first object; receiving second motion data corresponding to a second object; and applying an asymmetric correlation rule to the first motion data and the second motion data, the asymmetric correlation rule defining a baseline state of motion for the first object and a correlation relationship between the first object and the second object, and applying the asymmetric motion rule comprising: determining, based on the first motion data, whether the first object is in the baseline state of motion; in response to determining that the first object is not in the baseline state of motion, determining, based on the first motion data and the second motion data, whether a first motion vector of the first object is correlated at a threshold level of correlation with a second motion vector of the second object, the correlation relationship between the first object and the second object identifying the threshold level of correlation between the first motion vector and the second motion vector; and in response to determining both that the first object is not in the baseline state of motion and that the first motion vector of the first object is not correlated with the second motion vector of the second object at the threshold level of correlation, generating a notification that the first object is behaving anomalously.