Filesystem Timeline Analysis

Build a simple MACB-style timeline from synthetic artifact timestamps to spot attacker windows.

This room unlocks when you enrol in a linked course or have a matching Learn plan. No separate lab checkout — practice stays inside the track.