OPERATOR

#!/usr/bin/env python3
"""
SYNTAX v18.0 - Enterprise Cybersecurity Platform
Terminal-based threat intelligence and security posture management
GitHub: https://github.com/naqqibb/syntax
License: Apache License 2.0
"""

import os
import sys
import time
import random
from datetime import datetime

class Colors:
    HEADER = '\033[95m'
    OKBLUE = '\033[94m'
    OKCYAN = '\033[96m'
    OKGREEN = '\033[92m'
    WARNING = '\033[93m'
    FAIL = '\033[91m'
    ENDC = '\033[0m'
    BOLD = '\033[1m'
    DIM = '\033[2m'


def print_banner():
    print(f"""{Colors.BOLD}{Colors.FAIL}
╔══════════════════════════════════════════════════════════════════════════════════════════╗
║                        SYNTAX v18.0 - ENTERPRISE SECURITY PLATFORM                       ║
║                     Real-Time Terminal Reporting & Incident Monitoring                   ║
║                                                                                          ║
╚══════════════════════════════════════════════════════════════════════════════════════════╝
{Colors.ENDC}""")


def print_features_report():
    print(f"\n{Colors.BOLD}{Colors.HEADER}SYNTAX v18.0 PREMIUM FEATURES & VALUATION{Colors.ENDC}")
    print("=" * 90)
    
    features = [
        ("Mobile API Endpoints", 1.0),
        ("UEBA Analytics Engine", 2.5),
        ("Threat Intelligence (50+ sources)", 2.5),
        ("Quantum-Safe Cryptography", 2.0),
        ("Cloud CSPM (AWS/Azure/GCP)", 2.5),
        ("Real-Time Incident Monitoring", 2.0),
        ("Automated Compliance Reports", 1.5),
        ("24/7 SOC Operations", 5.0),
        ("Enterprise Support SLA", 2.5),
        ("Integration APIs & Marketplace", 2.0),
    ]
    
    total = 0
    print(f"\n{Colors.BOLD}Feature Breakdown:{Colors.ENDC}")
    for feature, value in features:
        total += value
        print(f"  {Colors.OKGREEN}✓{Colors.ENDC} {feature:45s} ${value}M")
    
    print(f"\n{Colors.FAIL}{'─' * 90}{Colors.ENDC}")
    print(f"{Colors.BOLD}Total Annual SaaS Valuation: ${total}M - ${total + 10}M{Colors.ENDC}")
    print(f"{Colors.BOLD}5-Year Enterprise Value: ${total * 5}M+{Colors.ENDC}")
    
    print(f"\n{Colors.WARNING}Ideal Customers:{Colors.ENDC}")
    customers = [
        "National Cybersecurity Agencies",
        "Fortune 500 Companies",
        "Financial Institutions",
        "Healthcare Systems",
        "Critical Infrastructure",
        "Government Departments",
        "Cloud Service Providers"
    ]
    for customer in customers:
        print(f"  • {customer}")
    
    print(f"\n{Colors.OKGREEN}Revenue Models:{Colors.ENDC}")
    print(f"  • Open Source (Free) - Community + Brand")
    print(f"  • Commercial License - $50K-$500K per enterprise")
    print(f"  • Support Contracts - $500K-$2M annually")
    print(f"  • Cloud SaaS - $25M-$35M annually")
    print(f"  • Government Contracts - $1M-$5M per agency")
    print(f"  • Training & Consulting - $300K-$1M annually")


def monitor_incidents():
    print(f"\n{Colors.BOLD}{Colors.HEADER}REAL-TIME INCIDENT MONITOR - ACTIVE{Colors.ENDC}")
    print("=" * 90)
    
    threats = [
        ("C2 Beaconing Detected", "CRITICAL"),
        ("Data Exfiltration Attempt", "HIGH"),
        ("Suspicious Login", "MEDIUM"),
        ("Malware Distribution", "HIGH"),
        ("Ransomware Activity", "CRITICAL"),
        ("SQL Injection Attempt", "MEDIUM"),
        ("Lateral Movement", "HIGH"),
        ("Privilege Escalation", "CRITICAL"),
        ("DDoS Attack", "HIGH"),
        ("Phishing Email", "MEDIUM"),
    ]
    
    counter = 0
    try:
        while True:
            counter += 1
            threat_name, severity = random.choice(threats)
            timestamp = datetime.now().strftime('%H:%M:%S')
            source_ip = f"{random.randint(1,255)}.{random.randint(1,255)}.{random.randint(1,255)}.{random.randint(1,255)}"
            target = random.choice(['prod-db-01', 'web-server', 'api-gateway', 'admin-portal', 'file-server'])
            confidence = random.randint(70, 99)
            
            if severity == "CRITICAL":
                emoji = "🔴"
                color = Colors.FAIL
            elif severity == "HIGH":
                emoji = "🟠"
                color = Colors.WARNING
            else:
                emoji = "🟡"
                color = Colors.OKGREEN
            
            print(f"\n{emoji} [{timestamp}] {color}[{severity}]{Colors.ENDC} {threat_name}")
            print(f"   ├─ Threat ID: THREAT-{counter:05d}")
            print(f"   ├─ Source IP: {source_ip}")
            print(f"   ├─ Target: {target}")
            print(f"   ├─ Confidence: {confidence}%")
            print(f"   └─ Status: {random.choice(['BLOCKED', 'MONITORED', 'ISOLATED'])}")
            
            if severity == "CRITICAL":
                print(f"   {Colors.OKGREEN}✓ AUTO-RESPONSE ACTIVATED{Colors.ENDC}")
                print(f"      ├─ IP Blocked")
                print(f"      ├─ Segment Isolated")
                print(f"      └─ SOC Team Alerted")
            
            if random.random() > 0.6:
                user = random.choice(['admin_001', 'analyst_89', 'user_042', 'manager_15'])
                print(f"\n   {Colors.WARNING}UEBA Alert: {user}{Colors.ENDC}")
                print(f"      └─ {random.choice(['Unusual access', 'Data spike', 'Privilege change'])}")
            
            if random.random() > 0.7:
                print(f"\n   {Colors.OKCYAN}Threat Intel Match: IOC-{random.randint(10000, 99999)}{Colors.ENDC}")
            
            time.sleep(random.uniform(3, 8))
            
    except KeyboardInterrupt:
        print(f"\n\n{Colors.WARNING}Monitoring stopped{Colors.ENDC}\n")


def main():
    print_banner()
    time.sleep(1)
    
    print(f"\n{Colors.BOLD}{Colors.HEADER}SELECT MODE:{Colors.ENDC}")
    print("1. Features & Valuation Report")
    print("2. Real-Time Incident Monitor")
    print("3. Both (Report + Monitor)")
    print()
    
    choice = input(f"{Colors.BOLD}Select (1/2/3): {Colors.ENDC}").strip()
    
    if choice == "1":
        print_features_report()
    elif choice == "2":
        monitor_incidents()
    elif choice == "3":
        print_features_report()
        time.sleep(2)
        print(f"\n{Colors.HEADER}Starting Real-Time Monitor...{Colors.ENDC}\n")
        time.sleep(2)
        monitor_incidents()
    else:
        print(f"{Colors.FAIL}Invalid choice{Colors.ENDC}")
        return 1
    
    return 0


if __name__ == '__main__':
    try:
        sys.exit(main())
    except KeyboardInterrupt:
        print(f"\n{Colors.WARNING}System shutdown{Colors.ENDC}\n")
        sys.exit(130)
    except Exception as e:
        print(f"{Colors.FAIL}Error: {e}{Colors.ENDC}\n")
        sys.exit(1)