Abstract: A computer-implemented method, a device, and a computer readable storage medium are disclosed to enable the definition of rules for identifying occurrences of situations in a security system. The method is performed at an electronic device with access to a user interface. The method includes: obtaining indicia; accessing one or more information sources to retrieve contextual information based on the indicia; exposing, via the user interface, one or more condition-related user-selectable user interface elements; generating a rule for identifying occurrences of a situation based on one or more respective conditions corresponding to a selected subset of the one or more condition-related user-selectable user interface elements; and storing the rule in a rule database for use in monitoring for occurrences of the situation.