utmp

$ target-query <path/to/target> -f utmp

Details

Module	os.unix.log.utmp.UtmpPlugin
Output	records

Module documentation

Unix utmp log plugin.

Function documentation

Yield contents of wtmp log files.

The wtmp file contains the historical data of the utmp file. The utmp file contains information about users logins at which terminals, logouts, system events and current status of the system, system boot time (used by uptime) etc.

References:

• https://www.thegeekdiary.com/what-is-the-purpose-of-utmp-wtmp-and-btmp-files-in-linux/