A computer implemented method, apparatus, and computer program are provided. The method is under control of one or more processors configured with executable instructions. The method detects, at a wireless activity (WLA) tracking apparatus, wireless activity of a mobile device in a proximity of a local wireless environment. The method automatically generates a WLA timestamp associated with the detecting the wireless activity of the mobile device and utilizes one or more of the wireless activity and WLA timestamp to identify one or more of a security device and a segment of security data collected by the security device.