InternalRuleFired events will say which rule made it fire with the InferrenceRule field. I would suggest you run a ndepth query to look for that event in the timeframe that you see the email firing or look at your filter for Internal events and look at the InternalRuleFired event
Also if the InternalRuleFired event is in your filter you can explore that event and see what it fired and what made it fire.