Timeline Consolidator

Use after parser skills to merge their JSON entries into the consolidated timeline.

Input Contract

• JSON files in output/: cs_entries.json, mythic_entries.json, terminal_entries.json, md_notes_entries.json, pdf_notes_entries.json, gw_entries.json.

Output

• output/timeline.md (markdown table) and output/timeline.json (normalized array) following the schema: timestamp, source, operator, action, details, mitre_tags, duplicate_flag, raw_timestamp.
• Metadata report summarizing counts per source, duplications, and MITRE tag coverage.