assertEquals("S-1-5-10-20", sid.toString());
        }

        @Test
        @DisplayName("Binary constructor with invalid sub_authority_count throws RuntimeCIFSException")
        void testBinaryConstructorInvalidCount() {
            // Arrange: second byte is sub_authority_count > 100
            byte[] bytes = new byte[1 + 1 + 6];
            bytes[0] = 1; // revision
            bytes[1] = (byte) 101; // invalid count

        assertNotNull(securityDescriptor.getOwnerUserSid());
        assertNotNull(securityDescriptor.getOwnerGroupSid());
        assertEquals(3, securityDescriptor.getOwnerUserSid().sub_authority_count);
        assertEquals(2, securityDescriptor.getOwnerGroupSid().sub_authority_count);
    }

    @Test
    @DisplayName("Test decode with DACL at non-zero offset")
    void testDecodeWithDaclAtNonZeroOffset() throws SMBProtocolDecodingException {

        buffer.put((byte) 0x01); // SubAuthorityCount
        buffer.put(new byte[] { 0, 0, 0, 0, 0, 1 }); // IdentifierAuthority
        buffer.putInt(0); // SubAuthority

        // Group SID at offset 40
        buffer.position(40);
        buffer.put((byte) 0x01); // Revision
        buffer.put((byte) 0x01); // SubAuthorityCount
        buffer.put(new byte[] { 0, 0, 0, 0, 0, 2 }); // IdentifierAuthority