// Act
            sid.resolve("server.example", mockCtx);

            // Assert: resolver.resolveSids called with this SID
            ArgumentCaptor<jcifs.SID[]> captor = ArgumentCaptor.forClass(jcifs.SID[].class);
            verify(mockResolver, times(1)).resolveSids(same(mockCtx), eq("server.example"), captor.capture());
            assertSame(sid, captor.getValue()[0]);
        }

        String req = "some/path";
        locator.handleDFSReferral(referral, req);

        ArgumentCaptor<DfsReferralData> drCap = ArgumentCaptor.forClass(DfsReferralData.class);
        ArgumentCaptor<String> pathCap = ArgumentCaptor.forClass(String.class);
        verify(locator).handleDFSReferral(drCap.capture(), pathCap.capture());

        assertSame(referral, drCap.getValue());

            // Assert
            assertEquals(3, n, "Should report bytes read from SMB2 response");

            // Verify the request offset equals the skip value (2)
            ArgumentCaptor<Smb2ReadRequest> cap = ArgumentCaptor.forClass(Smb2ReadRequest.class);
            verify(mockTree).send(cap.capture(), any(RequestParam.class));
            Smb2ReadRequest req = cap.getValue();

        List<FileNotifyInformation> result = sut.watch();

        assertSame(info, result, "Should return response notify information");
        ArgumentCaptor<CommonServerMessageBlockRequest> reqCap = ArgumentCaptor.forClass(CommonServerMessageBlockRequest.class);
        verify(tree).send(reqCap.capture(), any(), any(), any());

        verify(tree, times(2)).send(isA(Trans2FindNext2.class), any(Trans2FindFirst2Response.class));

        // Close should have sent FindClose2 exactly once
        ArgumentCaptor<SmbComFindClose2> captor = ArgumentCaptor.forClass(SmbComFindClose2.class);
        verify(tree, times(1)).send(captor.capture(), any());
        assertNotNull(captor.getValue());

        // Tree handle is released after close

        SmbFileHandleImpl result = SmbCopyUtil.openCopyTargetFile(dest, attrs, alsoRead);

        // Assert
        assertSame(handle, result, "Should return handle from dest.openUnshared");

        ArgumentCaptor<Integer> accessCaptor = ArgumentCaptor.forClass(Integer.class);
        verify(dest, times(1)).openUnshared(anyInt(), accessCaptor.capture(), anyInt(), eq(attrs), anyInt());
        int access = accessCaptor.getValue();

        lenient().when(request.isSecure()).thenReturn(true);
        when(request.getSession()).thenReturn(session);

        ntlmServlet.service(request, response);

        ArgumentCaptor<NtlmPasswordAuthentication> authCaptor = ArgumentCaptor.forClass(NtlmPasswordAuthentication.class);
        verify(session).setAttribute(eq("NtlmHttpAuth"), authCaptor.capture());

        NtlmPasswordAuthentication capturedAuth = authCaptor.getValue();

        byte[] out = new byte[10];
        int read = target.sendrecv(new byte[] { 9, 8, 7 }, 0, 3, out, 1024);
        assertEquals(42, read);

        // Verify we issued an SMB2 IOCTL
        ArgumentCaptor<Smb2IoctlRequest> captor = ArgumentCaptor.forClass(Smb2IoctlRequest.class);
        verify(tree).send(captor.capture(), any());
        assertNotNull(captor.getValue());
    }

    @Test

        assertNotNull(out);
        assertTrue(out.length > 0);

        // Verify interactions: flags and an empty optimistic token are used
        verify(this.mechContext, times(1)).getFlags();
        ArgumentCaptor<byte[]> cap = ArgumentCaptor.forClass(byte[].class);
        verify(this.mechContext, times(1)).initSecContext(cap.capture(), eq(0), eq(0));
        assertEquals(0, cap.getValue().length, "Optimistic token must be zero-length");
    }

        h.close(lastWrite);

        // Verify SMB1 close path uses request + response overload
        ArgumentCaptor<CommonServerMessageBlockRequest> reqCap = ArgumentCaptor.forClass(CommonServerMessageBlockRequest.class);
        ArgumentCaptor<SmbComBlankResponse> respCap = ArgumentCaptor.forClass(SmbComBlankResponse.class);
        verify(tree, times(1)).send(reqCap.capture(), respCap.capture(), eq(RequestParam.NO_RETRY));