logger.logSecurityViolation("Test violation with stack trace", context);

        logger.setIncludeStackTrace(false);
        logger.logSecurityViolation("Test violation without stack trace", context);

        Map<EventType, Long> stats = logger.getStatistics();
        assertEquals(Long.valueOf(2), stats.get(EventType.SECURITY_VIOLATION), "Should have 2 security violation events");
    }

    @Test

        assertTrue(exception.getMessage().toLowerCase().contains("access") && exception.getMessage().toLowerCase().contains("denied"));
    }

    @Test
    @DisplayName("Should format error message for sharing violation")
    void testSharingViolationError() {
        // Given
        int ntStatus = NtStatus.NT_STATUS_SHARING_VIOLATION;

        // When
        SmbException exception = new SmbException(ntStatus, false);

        // Should be an error status (0xC prefix)
        assertTrue((status & (int) 0xC0000000L) == (int) 0xC0000000L);
    }

    @Test
    @DisplayName("Should handle sharing violation status")
    void testSharingViolationStatus() {
        // Given
        int status = NtStatus.NT_STATUS_SHARING_VIOLATION;

        // When/Then
        assertEquals((int) 0xC0000043L, status);

import jcifs.CIFSException;

/**
 * Exception thrown when errors occur during SMB protocol message decoding.
 * Indicates that an SMB message could not be properly parsed or decoded due to
 * malformed data, protocol violations, or unsupported message formats.
 *
 * @author mbechler
 */
public class SMBProtocolDecodingException extends CIFSException {

    /**
     *
     */

### 4. Error Messages
- ✅ Encoding information in TextExtractor errors
- ✅ File type context in MS Office errors
- ✅ Archive type in archive extractor errors

## Testing Best Practices

1. **Isolation**: Each test is independent and doesn't affect others
2. **Clarity**: Test names clearly describe what is being tested
3. **Coverage**: Both success and failure paths are tested

 * and DI container integration.
 *
 * <p>Thread Safety: This class is thread-safe. Each evaluate() call creates
 * a new GroovyShell instance to ensure thread isolation.</p>
 *
 * <p>Resource Management: GroovyClassLoader instances are properly managed
 * and cleaned up after script evaluation to prevent memory leaks.</p>
 */
public class GroovyEngine extends AbstractScriptEngine {