verify(mockFileNotifyInfo, times(1)).getFileName();
        }

        @ParameterizedTest
        @ValueSource(ints = { 0x00000001, 0x00000002, 0x00000003, 0x00000004, 0x00000005, 0x00000006, 0x00000007, 0x00000008, 0x00000009 })
        @DisplayName("Test getAction with various action values")
        void testGetActionWithVariousValues(int actionValue) {

    /**
     * File has been modified
     */
    int FILE_ACTION_MODIFIED = 0x00000003;

    /**
     * File has been renamed (old name)
     */
    int FILE_ACTION_RENAMED_OLD_NAME = 0x00000004;

    /**
     * File has been renamed (new name)
     */
    int FILE_ACTION_RENAMED_NEW_NAME = 0x00000005;

    /**
     * File stream has been added
     */

            0x00000200, 0x00020200, 0x08020000, 0x08020008, 0x00020208, 0x08000208, 0x00020200, 0x00020000, 0x08000208, 0x00000008,
            0x08020208, 0x00000200, 0x08000000, 0x08020200, 0x08000000, 0x00020008, 0x00000208, 0x00020000, 0x08020200, 0x08000200,

			[out] LsarSidArray *sids);

	typedef [v1_enum] enum {
		SE_GROUP_MANDATORY          = 0x00000001,
		SE_GROUP_ENABLED_BY_DEFAULT = 0x00000002,
		SE_GROUP_ENABLED            = 0x00000004,
		SE_GROUP_OWNER              = 0x00000008,
		SE_GROUP_USE_FOR_DENY_ONLY  = 0x00000010,
		SE_GROUP_RESOURCE           = 0x20000000,
		SE_GROUP_LOGON_ID           = 0xC0000000
	} SamrGroupAttrs;

	typedef struct {
		uint32_t rid;

			[out] LsarSidArray *sids);

	typedef [v1_enum] enum {
		SE_GROUP_MANDATORY          = 0x00000001,
		SE_GROUP_ENABLED_BY_DEFAULT = 0x00000002,
		SE_GROUP_ENABLED            = 0x00000004,
		SE_GROUP_OWNER              = 0x00000008,
		SE_GROUP_USE_FOR_DENY_ONLY  = 0x00000010,
		SE_GROUP_RESOURCE           = 0x20000000,
		SE_GROUP_LOGON_ID           = 0xC0000000
	} SamrGroupAttrs;

	typedef struct {
		uint32_t rid;

    /**
     * Permission to write extended attributes
     */
    int FILE_WRITE_EA = 0x00000010; // 5
    /**
     * Permission to execute a file or traverse a directory
     */
    int FILE_EXECUTE = 0x00000020; // 6
    /**
     * Permission to delete a file or directory
     */
    int FILE_DELETE = 0x00000040; // 7
    /**
     * Permission to read file attributes
     */

      <match value="0xFEEDFACE" type="string" offset="0">
        <match value="0x00000001" type="big32" offset="12"/>
      </match>
      <match value="0xCEFAEDFE" type="string" offset="0">
        <match value="0x00000001" type="little32" offset="12"/>
      </match>
      <match value="0xFEEDFACF" type="string" offset="0">
        <match value="0x00000001" type="big32" offset="12"/>
      </match>

    private static final int FILE_ACTION_ADDED = 0x00000001;
    private static final int FILE_ACTION_REMOVED = 0x00000002;
    private static final int FILE_ACTION_MODIFIED = 0x00000003;
    private static final int FILE_ACTION_RENAMED_OLD_NAME = 0x00000004;
    private static final int FILE_ACTION_RENAMED_NEW_NAME = 0x00000005;
    
    private static final int FILE_NOTIFY_CHANGE_FILE_NAME = 0x00000001;

     * SMB2 File Action constants
     */
    private static final int FILE_ACTION_ADDED = 0x00000001;
    private static final int FILE_ACTION_REMOVED = 0x00000002;
    private static final int FILE_ACTION_MODIFIED = 0x00000003;
    private static final int FILE_ACTION_RENAMED_OLD_NAME = 0x00000004;
    private static final int FILE_ACTION_RENAMED_NEW_NAME = 0x00000005;

    /**
     * SMB2 File Notify Change constants
     */

    private static final int FILE_NOTIFY_CHANGE_DIR_NAME = 0x00000002;
    private static final int FILE_NOTIFY_CHANGE_ATTRIBUTES = 0x00000004;
    private static final int FILE_NOTIFY_CHANGE_SIZE = 0x00000008;
    private static final int FILE_NOTIFY_CHANGE_LAST_WRITE = 0x00000010;
    private static final int FILE_NOTIFY_CHANGE_LAST_ACCESS = 0x00000020;