Starting with version 4.2.3 EventSentry supports custom threat feedshttps://www.eventsentry.com/documentation/help/html/configglobaloptions.htm black lists in addition to the builtin threat feeds. EventSentry loads additional IP address from the following file: systemroot\system32\eventsentry\temp\eventsentrythreatintelcustom.tmp...
