timeline: add created files extraction
timeline: add created files extraction

By specifying the --extract parameter, is now possible to extract newly
created files from the disk image.

Signed-off-by: Matteo Cafasso <43c758619f0ced9dc5c51a50803f3466c86e4c3d@gmail.com>

noxdafox/vminspect