Exfiltrated Lab

A Linux server has shown signs of unauthorized access. Authentication logs reveal repeated failed login attempts followed by successful intrusions. The attacker escalated privileges and created backdoors for persistence. Your task is to analyze forensic artifacts, identify entry points, and determine if data exfiltration occurred. Reconstruct the attack timeline and suggest security improvements.