I was able to use Correlation Time in a satisfactory manner for my issue, but I will keep in mind the use of user-defined groups to stop a rule from triggering.
The problem with that solution though was that the condition to stop the rule from being triggered doesn't exist fast enough to prevent being spammed with alerts. For example, in the case where I copy a bunch of files to a monitored folder at once, all those events will trigger the rule before the value is added to the user-defined group to prevent further alerts, so I still gets spammed.