Validation Set Worship

Only 1% of cases are positive, and the desk can manually investigate just the top 100 alerts each day. When tuning thresholds, would PR-oriented metrics or ROC-oriented metrics deserve more emphasis first?