Login history keeps records on who is attempting logins into which machines and how frequently. This can be an important item to track who may be accessing devices that they shouldn't be. Login history can also identify suspicious activity on higher privileged devices that may contain critical or sensitive information. Anomalous logins can be crosschecked with login history to validate suspicious activity of a user.