custom hash list feeds
support automation of adding block hashes into endpoint protection blocked items via custom feeds
alerts on the dashboard for detection of files that are in the blocked item list. currently there is no alerts on the dashboard. if one does not have a SIEM to do monitoring, then one must manually check each endpoint in the central to see who has detection due to the blocked item list.
option to automatically create case based on item 2.