wtmp

$ target-query <path/to/target> -f wtmp

Details

Module	os.unix.log.utmp.UtmpPlugin
Output	records

Module documentation

No documentation

Function documentation

Return the content of the wtmp log files.

The wtmp file contains the historical data of the utmp file. The utmp file contains information about users logins at which terminals, logouts, system events and current status of the system, system boot time (used by uptime) etc.

References:

• https://www.thegeekdiary.com/what-is-the-purpose-of-utmp-wtmp-and-btmp-files-in-linux/