SolarWinds releases known attack timeline but new data suggests hackers may have done a dummy run last year