A Relational Framework for Modelling Active Intruders