lastlog

$ target-query <path/to/target> -f lastlog

Details

Module	dissect.target.plugins.os.unix.log.lastlog.LastLogPlugin
Output	records

Module documentation

Unix lastlog plugin.

Function documentation

Return last logins information from /var/log/lastlog.

The lastlog file contains the most recent logins of all users on a Unix based operating system.

References:

• https://www.tutorialspoint.com/unix_commands/lastlog.htm