lastcomm

Show previously executed commands (process accounting; acct package).

$ sudo lastcomm
$ sudo lastcomm operator
$ sudo lastcomm --command sshd