I just found out about last(1) and lastb(1) while wondering about /var/log/wtmp. This can come in handy! The filenames remain a bit mysterious: https://unix.stackexchange.com/questions/127211/why-are-utmp-wtmp-and-btmp-called-as-they-are