Before creating automatic response rules, think about the actions you want the ePO - SaaS server to take.
Plan for these items:
The event types that trigger messages in your environment.
The types and levels of thresholds that you want to set for each rule. For example, you might not want to receive an email message every time an infected file is detected during an outbreak. Instead, you can choose to send one message for every 1,000 events.