diff --git a/volatility/framework/plugins/windows/netstat.py b/volatility/framework/plugins/windows/netstat.py index b0d3c8bcf..67e781380 100644 --- a/volatility/framework/plugins/windows/netstat.py +++ b/volatility/framework/plugins/windows/netstat.py @@ -94,10 +94,10 @@ class NetStat(interfaces.plugins.PluginInterface, timeliner.TimeLinerInterface): The list of indices at which a 1 was found. """ ret = [] - for idx in range(bitmap_size_in_byte-1): + for idx in range(bitmap_size_in_byte): current_byte = context.layers[layer_name].read(bitmap_offset + idx, 1)[0] current_offs = idx * 8 - for bit in range(7): + for bit in range(8): if current_byte & (1 << bit) != 0: ret.append(bit + current_offs) return ret