diff --git a/CHANGELOG.md b/CHANGELOG.md index c0b95282..e1821d3f 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -95,6 +95,7 @@ - explorer: add option to limit features to currently selected disassembly address #692 @mike-hunhoff - explorer: update support documentation and runtime checks #741 @mike-hunhoff - explorer: small performance boost to rule generator search functionality #742 @mike-hunhoff +- explorer: add support for arch, os, and format features #758 @mike-hunhoff ### Development diff --git a/capa/ida/plugin/model.py b/capa/ida/plugin/model.py index d18f78cb..5b852191 100644 --- a/capa/ida/plugin/model.py +++ b/capa/ida/plugin/model.py @@ -603,6 +603,9 @@ class CapaExplorerDataModel(QtCore.QAbstractItemModel): # display no preview return CapaExplorerFeatureItem(parent, location=location, display=display) + if feature["type"] in ("arch", "os", "format"): + return CapaExplorerFeatureItem(parent, display=display) + raise RuntimeError("unexpected feature type: " + str(feature["type"])) def update_function_name(self, old_name, new_name):