diff --git a/CHANGELOG.md b/CHANGELOG.md index f285d59e..5735ccf5 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -16,7 +16,8 @@ ### Bug Fixes -- Fix binja backend stack string detection. [#1473](https://github.com/mandiant/capa/issues/1473) [@xusheng6](https://github.com/xusheng6) +- Fix binja backend stack string detection. #1473 @xusheng6 +- linter: skip native API check for NtProtectVirtualMemory #1675 @williballenthin ### capa explorer IDA Pro plugin diff --git a/scripts/lint.py b/scripts/lint.py index 847f574a..f155c89b 100644 --- a/scripts/lint.py +++ b/scripts/lint.py @@ -569,6 +569,7 @@ class FeatureNtdllNtoskrnlApi(Lint): "ZwCreateProcess", "ZwCreateUserProcess", "RtlCreateUserProcess", + "NtProtectVirtualMemory", ): # ntoskrnl.exe does not export these routines continue