diff --git a/include/Domito.h b/include/Domito.h
index 0433f03..7fab754 100644
--- a/include/Domito.h
+++ b/include/Domito.h
@@ -143,6 +143,7 @@ DomitoMemorySearchPattern(
 // Extracts the CALG_ID from a signed PE that was used to
 // calculate the message digest when it was signed
 //
+_IRQL_requires_max_(DISPATCH_LEVEL)
 EXTERN_C
 UINT32
 DomitoGetPortableExecutableDigestKind(
diff --git a/src/Domito.cpp b/src/Domito.cpp
index 41b5b02..75281ed 100644
--- a/src/Domito.cpp
+++ b/src/Domito.cpp
@@ -258,6 +258,7 @@ DomitoMemorySearchPattern(
     return STATUS_NOT_FOUND;
 }
 
+_IRQL_requires_max_(DISPATCH_LEVEL)
 UINT32
 DomitoGetPortableExecutableDigestKind(
     _In_ PUCHAR pPeBytes,