Abstract: A method of identifying suspicious movements in video images, comprising: examining a video stream, in a first video motion detection (VMD) stage, to identify sequences of a plurality of video frames in which the video frames together indicate a possibility of movement of an object within the video stream; initiating operation of a second VMD stage on the video stream, which includes analyzing the pixel content of frames of the video stream to identify suspect objects, responsive to an indication from the first VMD stage; and providing an indication of a suspicious movement if the second VMD resulted in an identification of movement of a suspect object.