// State 1: Generate Type 1 message
        context.initSecContext(new byte[0], 0, 0);

        // Create a mock Type 2 message (server challenge)
        byte[] serverChallenge = new byte[] { 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08 };
        int type2Flags = NtlmFlags.NTLMSSP_NEGOTIATE_NTLM | NtlmFlags.NTLMSSP_REQUEST_TARGET | NtlmFlags.NTLMSSP_NEGOTIATE_KEY_EXCH
                | NtlmFlags.NTLMSSP_NEGOTIATE_SIGN;

        bufferIndex++;
        this.server.security = this.server.securityMode & 0x01;
        this.server.encryptedPasswords = (this.server.securityMode & 0x02) == 0x02;
        this.server.signaturesEnabled = (this.server.securityMode & 0x04) == 0x04;
        this.server.signaturesRequired = (this.server.securityMode & 0x08) == 0x08;
        this.server.smaxMpxCount = SMBUtil.readInt2(buffer, bufferIndex);
        bufferIndex += 2;

            policyHandle.uuid.clock_seq_hi_and_reserved = (byte) 0x44;
            policyHandle.uuid.clock_seq_low = (byte) 0x55;
            policyHandle.uuid.node = new byte[] { (byte) 0x01, (byte) 0x02, (byte) 0x03, (byte) 0x04, (byte) 0x05, (byte) 0x06 };

            when(mockNdrBuffer.derive(anyInt())).thenReturn(mockNdrBuffer);

            // When: Encoding the policy handle
            policyHandle.encode(mockNdrBuffer);

        // Assert
        assertEquals(expectedFlags, queryPolicy.getFlags());
        // Binary check for individual flags
        assertEquals(0x03, queryPolicy.getFlags()); // 0x01 | 0x02 = 0x03
    }

    @Test
    void getOpnum_shouldReturnCorrectValue() {
        // Arrange
        short level = 1;

        byte[] wireData = new byte[] { 0x10, 0x00, // StructureSize (must be 16)
                0x01, // ShareType (DISK)
                0x00, // Reserved
                0x01, 0x00, 0x00, 0x00, // ShareFlags
                0x08, 0x00, 0x00, 0x00, // Capabilities
                (byte) 0xFF, 0x01, 0x1F, 0x00 // MaximalAccess
        };

        // When

        byte[] rawBytes = new byte[] { 0x01, 0x02, 0x03, 0x04 }; // Represents 0x04030201 (little-endian)
        AvFlags avFlags = new AvFlags(rawBytes);
        assertNotNull(avFlags, "AvFlags object should not be null");
        assertEquals(0x04030201, avFlags.getFlags(), "Flags should match the raw bytes (little-endian)");

        // Test with zero
        byte[] zeroBytes = new byte[] { 0x00, 0x00, 0x00, 0x00 };

        assertEquals(0x0A, AvPair.MsvAvChannelBindings, "MsvAvChannelBindings constant should be 0x0A.");
    }

    @Test
    void testRawDataImmutability() {
        int type = AvPair.MsvAvTimestamp;
        byte[] raw = new byte[] { 0x01, 0x02, 0x03, 0x04 };
        AvPair avPair = new AvPair(type, raw);

        // Modify the original raw array
        raw[0] = 0x05;

        }
        impersonationLevel = 0x02; // As seen on NT :~)
        securityFlags = (byte) 0x03; // SECURITY_CONTEXT_TRACKING | SECURITY_EFFECTIVE_ONLY
    }

    @Override
    int writeParameterWordsWireFormat(final byte[] dst, int dstIndex) {
        final int start = dstIndex;

        dst[dstIndex] = (byte) 0x00;
        dstIndex++;

        bufferIndex++;
        server.security = server.securityMode & 0x01;
        server.encryptedPasswords = (server.securityMode & 0x02) == 0x02;
        server.signaturesEnabled = (server.securityMode & 0x04) == 0x04;
        server.signaturesRequired = (server.securityMode & 0x08) == 0x08;
        server.maxMpxCount = readInt2(buffer, bufferIndex);
        bufferIndex += 2;

        originalPairs.add(new AvFlags(0x12345678));
        originalPairs.add(new AvTimestamp(new byte[] { 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08 }));
        originalPairs.add(new AvTargetName("TESTNAME".getBytes()));
        originalPairs.add(new AvSingleHost(new byte[] { 0x11, 0x22, 0x33, 0x44 }));
        originalPairs.add(new AvChannelBindings(new byte[] { 0x55, 0x66 }));