One of the problems with passive cavities is you may need a swept frequency source and a return loss bridge on a horn antenna to find them. Unless carefully compensated, the resonant frequency of an open ended cavity drifts considerably in use. near Field Body presence will have some semi-serious effects as well. A SA with a low sweep rate is not a great choice here for finding these, even with a tracking generator output.
The real way used to find them is a TSCM trick using some specialized gear and a narrow modulation or harmonic mixing technique. A TSCM specialist would not bat an eyelash over buying a 40,000$ or 100,000$ Spec An with IF and Tracking Generator Ports. Don't ask me in a PM, the answer is NO.
You have a web link for the widget in question? This sounds wayyyy too much like a "Great Seal" device, unless it is some tiny self mixing PCB. Ebay/Amazon searches would reveal many short range motion detectors and their rough frequency, which will drift because the self mixing method is somewhat independent due to direct conversion IFs. Method used for the in wall device will be highly dependent on installers budget and the customer's whims / skillset.
Steve