Merge pull request #1656 from RonnieSalomonsen/forward_export

rules: Add forwarded export characteristics to rule syntax under file…

CHANGELOG.md

@@ -82,6 +82,7 @@ For those that use capa as a library, we've introduced some limited breaking cha
 - output: don't leave behind traces of progress bar @williballenthin
 - import-to-ida: fix bug introduced with JSON report changes in v5 #1584 @williballenthin
 - main: don't show spinner when emitting debug messages #1636 @williballenthin
+- rules: add forwarded export characteristics to rule syntax file scope #1653 @RonnieSalomonsen
 
 ### capa explorer IDA Pro plugin
 

capa/rules/__init__.py

@@ -106,6 +106,7 @@ SUPPORTED_FEATURES: Dict[str, Set] = {
         capa.features.common.Class,
         capa.features.common.Namespace,
         capa.features.common.Characteristic("mixed mode"),
+        capa.features.common.Characteristic("forwarded export"),
     },
     FUNCTION_SCOPE: {
         capa.features.common.MatchedRule,