// Verify
        assertNull(result, "Authentication result should be null");

        // Capture the header value to verify its contents
        ArgumentCaptor<String> headerCaptor = ArgumentCaptor.forClass(String.class);
        verify(mockResponse).setHeader(eq("WWW-Authenticate"), headerCaptor.capture());
        String headerValue = headerCaptor.getValue();

        // Verify filter interactions: not called for '.' and '..', called for others
        verify(nameFilter, never()).accept(parent, ".");
        verify(nameFilter, never()).accept(parent, "..");
        ArgumentCaptor<String> nameCaptor = ArgumentCaptor.forClass(String.class);
        verify(nameFilter, atLeast(1)).accept(eq(parent), nameCaptor.capture());
        assertTrue(nameCaptor.getAllValues().contains(acceptedName));

        SID sid = new SID(adminSidString);
        String server = "myserver";
        sid.resolve(server, mockContext);

        ArgumentCaptor<jcifs.SID[]> sidArrayCaptor = ArgumentCaptor.forClass(jcifs.SID[].class);
        verify(mockResolver).resolveSids(eq(mockContext), eq(server), sidArrayCaptor.capture());
        assertEquals(1, sidArrayCaptor.getValue().length);

        // Resolve first two entries
        cache.resolveSids(ctx, null, arr, 0, 2);

        // Verify resolveSids0 called exactly once with the two SIDs needing resolution
        ArgumentCaptor<SID[]> captor = ArgumentCaptor.forClass(SID[].class);
        verify(cache, times(1)).resolveSids0(isNull(), same(ctx), captor.capture());
        SID[] resolvedFirst = captor.getValue();
        assertEquals(2, resolvedFirst.length);

        byte[] out = new byte[256];

        // Act
        int n = handle.sendrecv(out, 1, 10, in, 128);

        // Assert
        assertEquals(42, n);
        ArgumentCaptor<Smb2IoctlRequest> cap = ArgumentCaptor.forClass(Smb2IoctlRequest.class);
        verify(tree).send(cap.capture(), eq(RequestParam.NO_RETRY));
        assertNotNull(cap.getValue()); // captured request should be present
    }

    @Test

        // Intercept the 3-arg write to validate len
        doNothing().when(raf).write(any(byte[].class), anyInt(), anyInt());
        raf.writeBoolean(true);
        raf.writeByte(0x7F);
        ArgumentCaptor<Integer> lenCap = ArgumentCaptor.forClass(Integer.class);
        verify(raf, atLeast(2)).write(any(byte[].class), anyInt(), lenCap.capture());
        assertTrue(lenCap.getAllValues().stream().allMatch(len -> len == 1));
    }

    @Mock
    private DcerpcHandle mockDcerpcHandle;

    // Mocking MsrpcLsarOpenPolicy2 and MsrpcLsarClose is tricky because they are created inside the constructor/method.
    // We need to use ArgumentCaptor or a custom Answer to control their behavior.
    // For now, let's assume we can mock their behavior through the sendrecv method of DcerpcHandle.

    @BeforeEach
    void setUp() {