real last logon

real last logon

how this report is running and from which attribute it's collecting the information (lastlogon or lastlogon timestamp) ?

Mohammad Aaref HICT Supervisor