This read-only DateAndTime reports the date and time a currently tracked user session was created, i.e. when that user logged in. Admins use this to establish exactly how long a given session has been active. For example, an admin reviewing sessions during an incident response checks this object to see whether a suspicious session's login predates or coincides with the suspected compromise window.