I'm writing a SQL Server security audit script.

One thing I would like to check is the time since the last login for a given SQL Server login. Is this information recorded somewhere in a system table? I've had a look but can't fint it.

Any other pointers to info on good security audit scripts welcome.