The starting point of a site. A site’s timeline now also shows what was already there at the first backup: files that belong to known malware, PHP files among the uploads and suspicious file names in the WordPress core folders.
“WordPress itself” instead of “Unknown”. A core update that WordPress installs by itself and updated translations are now listed under “WordPress itself”. What stays under “Unknown” is what really needs attention.