You may wanna have the following.
1. On-access scan disabled
2. Access Protection if you have any specific rules defined that need to be monitored
3. Buffer Over Flow
4. New Rogue System detected if using RSD
5. Replication failure if you have distributed repositories configured
How to configure the above mentioned rule & made automation mail..