You manage Defender for Office 365 for Contoso. Your SOC team complains that a custom alert policy monitoring for a specific malware detection generates a separate notification email for every single matching message, flooding their shared mailbox during outbreaks. You need to reduce alert noise so the team receives a single grouped notification when the activity crosses a defined volume within a time window, while still capturing all matching events. What should you configure on the alert policy?