Timeline Mythic Parser

Trigger when Mythic exports (callbacks/tasks/responses/operations) are provided for timeline consolidation.

Input Contract

• Directory input/c2logs/mythic/ with JSON exports for callbacks, tasks, responses, or full operations.

Output

• Produce output/mythic_entries.json with timeline entries (timestamp, source, operator, action, details, raw_timestamp).
• Add metadata with source_type = "mythic", counts, and parse errors.