How can I be notified if there is suspicious activity, such as accessing or downloading a large number of files in a short period, or deleting a large number of files?
I would not like to have to count single email notifications from each such activity, only if some threshold is reached.