// Assert
        assertNotNull(aliasHandle);
        // Verify that sendrecv was called with the correct MsrpcSamrOpenAlias object
        ArgumentCaptor<MsrpcSamrOpenAlias> rpcCaptor = ArgumentCaptor.forClass(MsrpcSamrOpenAlias.class);
        verify(mockDcerpcHandle).sendrecv(rpcCaptor.capture());
        MsrpcSamrOpenAlias capturedRpc = rpcCaptor.getValue();

            // Act
            sid.resolve("server.example", mockCtx);

            // Assert: resolver.resolveSids called with this SID
            ArgumentCaptor<jcifs.SID[]> captor = ArgumentCaptor.forClass(jcifs.SID[].class);
            verify(mockResolver, times(1)).resolveSids(same(mockCtx), eq("server.example"), captor.capture());
            assertSame(sid, captor.getValue()[0]);
        }

        @Test

        // Verify SMB1 close path uses request + response overload
        ArgumentCaptor<CommonServerMessageBlockRequest> reqCap = ArgumentCaptor.forClass(CommonServerMessageBlockRequest.class);
        ArgumentCaptor<SmbComBlankResponse> respCap = ArgumentCaptor.forClass(SmbComBlankResponse.class);
        verify(tree, times(1)).send(reqCap.capture(), respCap.capture(), eq(RequestParam.NO_RETRY));

        // Act
        assertTrue(itr.hasNext());
        SmbResource r = itr.next();

        // Assert: filter was invoked twice and we got the accepted one
        ArgumentCaptor<SmbResource> captor = ArgumentCaptor.forClass(SmbResource.class);
        verify(filter, times(2)).accept(captor.capture());
        assertNotNull(r);
        assertTrue(r.getName().startsWith("TAKEME"));

        // Act
        boolean result = handle.hasCapability(cap);

        // Assert: verify return and the captured argument equals input
        assertTrue(result);
        ArgumentCaptor<Integer> captor = ArgumentCaptor.forClass(Integer.class);
        verify(handle, times(1)).hasCapability(captor.capture());
        assertEquals(cap, captor.getValue());
    }

    @Test
    @DisplayName("hasCapability(cap): propagates CIFSException on failure")

        verify(tree, times(2)).send(isA(Trans2FindNext2.class), any(Trans2FindFirst2Response.class));

        // Close should have sent FindClose2 exactly once
        ArgumentCaptor<SmbComFindClose2> captor = ArgumentCaptor.forClass(SmbComFindClose2.class);
        verify(tree, times(1)).send(captor.capture(), any());
        assertNotNull(captor.getValue());

        // Tree handle is released after close

        // Assert
        assertSame(handle, result, "Should return handle from dest.openUnshared");

        ArgumentCaptor<Integer> accessCaptor = ArgumentCaptor.forClass(Integer.class);
        verify(dest, times(1)).openUnshared(anyInt(), accessCaptor.capture(), anyInt(), eq(attrs), anyInt());
        int access = accessCaptor.getValue();

        when(request.getSession()).thenReturn(session);

        ntlmServlet.service(request, response);

        ArgumentCaptor<NtlmPasswordAuthentication> authCaptor = ArgumentCaptor.forClass(NtlmPasswordAuthentication.class);
        verify(session).setAttribute(eq("NtlmHttpAuth"), authCaptor.capture());

        NtlmPasswordAuthentication capturedAuth = authCaptor.getValue();

        int read = target.sendrecv(new byte[] { 9, 8, 7 }, 0, 3, out, 1024);
        assertEquals(42, read);

        // Verify we issued an SMB2 IOCTL
        ArgumentCaptor<Smb2IoctlRequest> captor = ArgumentCaptor.forClass(Smb2IoctlRequest.class);
        verify(tree).send(captor.capture(), any());
        assertNotNull(captor.getValue());
    }

    @Test
    @DisplayName("recv delegates to input.readDirect and returns its value")

        assertTrue(out.length > 0);

        // Verify interactions: flags and an empty optimistic token are used
        verify(this.mechContext, times(1)).getFlags();
        ArgumentCaptor<byte[]> cap = ArgumentCaptor.forClass(byte[].class);
        verify(this.mechContext, times(1)).initSecContext(cap.capture(), eq(0), eq(0));
        assertEquals(0, cap.getValue().length, "Optimistic token must be zero-length");
    }

    @ParameterizedTest