A process for maintaining geofence definitions associated with criminal organizations includes maintaining, at an electronic computing device, a stored first geofence definition defining a geographic area associated with a first criminal organization. The computing device receives audio and/or video streams from devices located outside of and/or inside of a boundary of the first geofence definition, and detects, via the one or more audio and/or video streams, a pattern-of-conduct of one or more individuals associated with the first criminal organization or associated with another criminal organization known to have an adversarial relationship with the first criminal organization. Responsive to detecting the pattern-of-conduct the computing device expands or contracts a boundary of the first geofence definition to create an updated first geofence definition associated with the first criminal organization and provides the updated first geofence definition to one or more target devices for display or further electronic processing.