}

    static Stream<Arguments> validParams() {
        // fid 0x1234, lastWriteTime 0 -> UTime all 0xFF
        return Stream.of(Arguments.of(0x1234, 0L, new byte[] { 0x34, 0x12, (byte) 0xFF, (byte) 0xFF, (byte) 0xFF, (byte) 0xFF }),
                // negative fid wraps around, lastWriteTime = 1000 -> 1 second -> int value 1

    static final int FLAGS_CLOSE_IF_END_REACHED = 0x02;
    static final int FLAGS_RETURN_RESUME_KEYS = 0x04;
    static final int FLAGS_RESUME_FROM_PREVIOUS_END = 0x08;
    static final int FLAGS_FIND_WITH_BACKUP_INTENT = 0x10;

    private final int searchAttributes;
    private final int tflags;
    private final int informationLevel;
    private final int searchStorageType = 0;
    private final int maxItems;

        buffer[4] = 0x01; // end of search = true
        buffer[5] = 0x00;
        // eaErrorOffset (2 bytes)
        buffer[6] = 0x00;
        buffer[7] = 0x00;
        // lastNameOffset (2 bytes)
        buffer[8] = 0x10;
        buffer[9] = 0x00;

        int result = response.readParametersWireFormat(buffer, 0, 10);

        // Should read 10 bytes
        assertEquals(10, result);

        int len = cmd.writeParametersWireFormat(buffer, 0);
        assertTrue(len >= 2);
        // writeInt2 writes in little-endian format (LSB first)
        assertEquals(0xAB, buffer[0] & 0xFF);
        assertEquals(0x12, buffer[1] & 0xFF);
        // Check that the path is written after the referral level
        // The path should be written starting at index 2
        // writeString adds null terminator

        // When
        String result = Hexdump.toHexString(data, offset, length);

        // Then
        assertNotNull(result);
        assertFalse(result.isEmpty());
        // Check starts with byte at offset 16 (0x10)
        assertTrue(result.startsWith("10111213"));
        assertEquals(64, result.length()); // 32 bytes * 2 chars per byte
    }

    @Test
    @DisplayName("Should handle invalid offset and length parameters")

     */
    int SACL_SECURITY_INFO = 0x8;

    /**
     * Flag indicating that mandatory label information is requested or being set.
     */
    int LABEL_SECURITY_INFO = 0x10;

    /**
     * Flag indicating that attribute security information is requested or being set.
     */
    int ATTRIBUTE_SECURITY_INFO = 0x20;

    /**

    }

    @Test
    @DisplayName("readSecurityBuffer correctly extracts data")
    void testReadSecurityBuffer() {
        byte[] buf = new byte[8 + 4];
        byte[] payload = { 0x11, 0x22, 0x33, 0x44 };
        NtlmMessage.writeSecurityBuffer(buf, 0, 8, payload);
        byte[] extracted = NtlmMessage.readSecurityBuffer(buf, 0);
        assertArrayEquals(payload, extracted, "Payload should match original");

    static int readTagNumber(final InputStream s, final int tag) throws IOException {
        int tagNo = tag & 0x1f;

        //
        // with tagged object tag number is bottom 5 bits, or stored at the start of the content
        //
        if (tagNo == 0x1f) {
            int b = s.read();
            if (b < 31) {
                if (b < 0) {

        // Arrange
        FileEntry e = new TestFileEntry("doc.pdf", 2, 0x10, 10L, 20L, 30L, 4096L, 3);

        // Act & Assert: getters return exactly what was provided
        assertAll(() -> assertEquals("doc.pdf", e.getName()), () -> assertEquals(2, e.getType()),
                () -> assertEquals(0x10, e.getAttributes()), () -> assertEquals(10L, e.createTime()),

    int FLAGS_RECEIVE_BUFFER_POSTED = 0x02;
    /** Path names are caseless flag */
    int FLAGS_PATH_NAMES_CASELESS = 0x08;
    /** Path names canonicalized flag */
    int FLAGS_PATH_NAMES_CANONICALIZED = 0x10;
    /** Oplock requested or granted flag */
    int FLAGS_OPLOCK_REQUESTED_OR_GRANTED = 0x20;
    /** Notify of modify action flag */
    int FLAGS_NOTIFY_OF_MODIFY_ACTION = 0x40;
    /** Response flag */