Merge pull request mandiant#826 from mandiant/rules52-36

add xxProtectVirtualMemory apis
MBCProject · Sep 13, 2023 · b9c2bc1 · b9c2bc1
2 parents eba332e + f971df9
commit b9c2bc1
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/lib/allocate-memory.yml b/lib/allocate-memory.yml
@@ -22,3 +22,5 @@ rule:
       - api: ZwAllocateVirtualMemory
       - api: NtMapViewOfSection
       - api: ZwMapViewOfSection
+      - api: NtProtectVirtualMemory
+      - api: ZwProtectVirtualMemory