}

        @Test
        @DisplayName("Should handle masked value round-trip correctly")
        void testMaskedValueRoundTrip() throws NdrException {
            // Given: Original value that gets masked
            int originalValue = 300; // Will be masked to 44
            int maskedValue = originalValue & 0xFF; // 44
            NdrShort ndrShort1 = new NdrShort(originalValue);

        trans2FindFirst2 = new Trans2FindFirst2(mockConfig, "\\test", "*.*", searchAttributes, 10, 1024);

        // Verify attributes are masked with 0x37
        int expectedAttributes = searchAttributes & 0x37;

        // Write parameters to verify the masked value is used
        byte[] buffer = new byte[100];
        int written = trans2FindFirst2.writeParametersWireFormat(buffer, 0);

        }

        // Log command template with masked password for security
        if (logger.isDebugEnabled()) {
            final String commandStr = stream(commands).get(stream -> stream.map(s -> {
                if ("$PASSWORD".equals(s)) {
                    return "***MASKED***";
                }
                if ("$USERNAME".equals(s)) {
                    return username;

            // Mask sensitive keys
            if (key.contains("password") || key.contains("secret") || key.contains("token") || key.contains("credential")) {
                masked.put(entry.getKey(), "****");
            } else if (value instanceof String) {
                masked.put(entry.getKey(), maskSensitiveData((String) value));
            } else {
                masked.put(entry.getKey(), value);
            }

                .orElse(false);
    }

    /**
     * Masks email addresses in the input string for privacy protection.
     *
     * @param value the string that may contain email addresses
     * @return string with email addresses replaced by masked pattern
     */
    public static String maskEmail(final String value) {
        if (value == null) {

        assertEquals(expectedType, info.getType());
    }

    @Test
    @DisplayName("Test getType with hidden flag")
    void testGetTypeWithHiddenFlag() {
        // Hidden flag (0x80000000) should be masked out
        int hiddenPrinterType = 0x80000001; // Hidden printer
        SmbShareInfo info = new SmbShareInfo(TEST_NET_NAME, hiddenPrinterType, TEST_REMARK);
        assertEquals(SmbConstants.TYPE_PRINTER, info.getType());

    /**
     * Tests to see if the file this SmbResource represents is marked as
     * hidden. This method will also return true for shares with names that
     * end with '$' such as <code>IPC$</code> or <code>C$</code>.
     *
     * @return <code>true</code> if the <code>SmbResource</code> is marked as being hidden
     * @throws CIFSException if an error occurs accessing the resource
     */

            // This is acceptable - not all JVM implementations support destroying SecretKey
            // The important part is that the storage is marked as destroyed
        }

        assertTrue(storage.isDestroyed(), "Storage should be marked as destroyed");

        // Operations should fail after destroy
        assertThrows(IllegalStateException.class, () -> {

        assertTrue(h.isValid());

        // Tree id change makes it invalid
        when(tree.getTreeId()).thenReturn(11L);
        assertFalse(h.isValid());

        // Connected=false makes it invalid
        when(tree.getTreeId()).thenReturn(10L);
        when(tree.isConnected()).thenReturn(false);
        assertFalse(h.isValid());

        // Mark closed makes it invalid
        when(tree.isConnected()).thenReturn(true);

    // file attribute encoding
    /**
     * File is marked read-only
     */
    int ATTR_READONLY = 0x01;
    /**
     * File is marked hidden
     */
    int ATTR_HIDDEN = 0x02;
    /**
     * File is marked a system file
     */
    int ATTR_SYSTEM = 0x04;
    /**
     * File is marked a volume
     */
    int ATTR_VOLUME = 0x08;
    /**
     * File is a directory