The Event Center screen appears.
The <Advanced Threats Event Type> Settings screen appears.
Trigger alerts on every single detection: Send notification when an advanced threat event is detected
Trigger alerts when endpoints match the following settings: Send only when the number of detections and period of consideration are met