Suspect Object Count > 0 rule
Suspect Object Count [@"Suspect Objects".Current@] > [@VALUE@]
Global
GLOBALSTATS