Embodiments of intrusion detection systems are described and which include an intrusion detection panel that receives binary and metadata sensor data from which the presence of an alarm condition is detected. In addition sensor devices analyze sensor data received from other sensor devices that are in a peer to peer relationship with the corresponding sensor device to validate whether the indicated alarm condition is a valid alarm or a false alarm.