Does Wordfence filter XML-RPC login requests?

Some colleagues and I are looking for a definitive answer on if and how Wordfence protects against abuse of XML-RPC to brute force WordPress logins. Clearly Wordfence is monitoring this, since you’ve blogged about it in the past. In documentation XML-RPC is only mentioned once indirectly in country blocking. In the forums there is a brief reply on this thread, but more details and an example of blocking would be greatly appreciated and lay a lot of concerns to rest. Thank you.