Field/value combinations most frequently checked by detection rules targeting this event, derived from cross-vendor predicate analysis.
ThreadType
chat