While performing database audits, you might need to check who logged in last into the database. following query will help you to findout who logged in to database :
select username, timestamp, action_name from dba_audit_session
where action_name='LOGON' and
rownum<10 and username not in ('SYS','DBSNMP','DUMMY','SYSTEM','RMAN');