Behavior analysis functions identify the objects and confirm if the objects behavior is qualified based on the rules. It can trigger alarm and provide useful information in the quickest and best way once detecting unqualified objects. For different behavior types, the detection rules are different, this manual mainly introduces the programming process of some typical types, such as intrusion, line crossing, region entrance, region exiting, and so on.