This actually takes some work because you have to enable the auditing of the folder on the windows server first, as windows won't log this by default. You can then use the 560 message to write your alert. Now, there are some gotchas when it comes to 560 messages and doing this kind of monitoring. The following link describes the 560 message and gives you some more information that you can use to help you with this alert creation:
Retrieving data ...