Each rule page has a switch, its thresholds and its action. Flood rules (messages, attachments, links, stickers) count within a time window; duplicates compare the normalised text of a member's recent messages, and with "across members" the same text posted by several members counts as raid spam. The @everyone rule has two modes: "without permission" reacts to members who write @everyone or @here without being allowed to ping (the ping never went through, nobody who may ping is ever punished), "new members" reacts to real pings by members who joined recently. Repeated triggers within the same window only delete the message and update the open case instead of creating a new one.
Example
/setup › Find a setting › Messages