A device and method for analyzing an event at a premises is provided. In one embodiment the device includes a processor and a memory configured to store executable instructions, which when executed by the processor, cause the processor to receive first event data related to the event at the premises, receive verification data related to the event at the premises, analyze the first event data in conjunction with the verification data, generate, based on the analysis, an indication of a probability that the event is an alarm event, and initiate at least one action based on the indication.