APT Simulation - Full Breach Scenario

This is not an attack exercise but a blue-team task of reading the logs of an incident that already happened. Analyze the consolidated timeline `/challenge/timeline.log` aggregated from EDR, authentication, and network devices, and reconstruct the APT stages (initial access -> privilege escalation -> lateral movement -> exfiltration) chronologically amid normal business logs. The flag is in the final exfiltration (EXFIL) event.