Knowledge Base

EventSentry integrates with AbuseIPDB in the following ways if an AbuseIPDB API token is configured in the management console under Global Options Security AbuseIPDB Token and Get Threat Intel is checked. Scheduled download of the current AbuseIPDB black list utilized by the Collector and Network Services/NetFlow component...

Starting with version 4.2.3 EventSentry supports custom threat feedshttps://www.eventsentry.com/documentation/help/html/configglobaloptions.htm black lists in addition to the builtin threat feeds. EventSentry loads additional IP address from the following file: systemroot\system32\eventsentry\temp\eventsentrythreatintelcustom.tmp ...