seed_ledger.ps1

# Seed Ledger Script for NullBlock CLI
# Ensure we are in the correct directory
cd "$PSScriptRoot"

Write-Host "==========================================" -ForegroundColor Cyan
Write-Host "NullBlock Threat Ledger Seeding Script" -ForegroundColor Cyan
Write-Host "==========================================" -ForegroundColor Cyan

# 1. Install dependencies
Write-Host "[*] Checking/Installing dependencies..." -ForegroundColor Yellow
pip install colorama cryptography

# 2. Register Analysts (Permanent SOC Team — Generates RSA keys in analysts/ directory)
Write-Host "`n[*] Registering permanent SOC analysts..." -ForegroundColor Yellow
python .py register-analyst --name "Priya Nair"
python .py register-analyst --name "Sofia Reyes"
python .py register-analyst --name "James Carter"
python .py register-analyst --name "Ahmed Khan"
python .py register-analyst --name "David Okafor"

# 3. Log threats & malware signatures (Permanent 5-block ledger)
Write-Host "`n[*] Logging permanent threat intelligence blocks..." -ForegroundColor Yellow

# Block 1: Threat — Priya Nair (SOC Analyst L2)
python .py add-threat --ip "198.51.100.42" --type "Brute Force SSH" --severity "MEDIUM" --port 22 --protocol "TCP" --reporter "Priya Nair" --notes "Multiple failed SSH logins - 47 attempts in 3 min from known malicious range"

# Block 2: Malware — Sofia Reyes (Malware Researcher)
python .py add-malware --hash "5f4dcc3b5aa765d61d8327deb882cf9937654321098765432109876543210987" --name "WannaCry" --family "Ransomware" --reporter "Sofia Reyes" --notes "Exploits EternalBlue MS17-010 - SMB worm propagation"

# Block 3: Threat — James Carter (Threat Intel Lead)
python .py add-threat --ip "203.0.113.88" --type "SQL Injection" --severity "HIGH" --port 443 --protocol "TCP" --reporter "James Carter" --notes "SQLi UNION SELECT on /api/billing - exfiltration attempt blocked by WAF"

# Block 4: Threat — Ahmed Khan (Incident Responder)
python .py add-threat --ip "185.220.101.5" --type "Log4j Exploit" --severity "CRITICAL" --port 8080 --protocol "TCP" --reporter "Ahmed Khan" --notes "JNDI LDAP CVE-2021-44228 outbound callback to attacker-controlled server"

# Block 5: Malware — David Okafor (SOC Manager)
python .py add-malware --hash "ab56cd78ef1234567890abcdef1234567890abcdef1234567890abcdef123456" --name "Cobalt Strike Beacon" --family "Trojan / Backdoor" --reporter "David Okafor" --notes "Malleable HTTP beacon C2 to 185.220.101.5:443 - lateral movement IOC"

# 4. Verify chain integrity
Write-Host "`n[*] Validating chain integrity..." -ForegroundColor Yellow
python .py validate

Write-Host "`n==========================================" -ForegroundColor Green
Write-Host "Seeding Complete!" -ForegroundColor Green
Write-Host "==========================================" -ForegroundColor Green