Systems and methods can support detecting and identifying threats associated with wireless devices. A radio receiver can collect radio frequency signals from one or more sensor antennas positioned within an electromagnetic environment. The receiver can generate data samples representing at least a portion of the radio frequency signals. Feature vectors can be generated comprising at least a portion of the data samples and attribute information. The attribute information can describe one or more features of a communicated signal within the radio frequency signals. Content of the feature vectors may be compared against signatures of known signals to identify radio frequency signals associated with a wireless attack. Content of the feature vectors may be compared against templates of known attacks to classify the identified wireless attacks. Threat information associated with the wireless attacks may be presented to one or more operator interfaces.