sunflower1/800P>ls -rlt /var/spool/cron/crontabs
total 138
-r——– 1 root root 452 Jan 21 2005 lp
-rw——- 1 root sys 308 Nov 9 2006 sys
-rw——- 1 root sys 317 Aug 20 18:51 adm
-rw——- 1 root staff 5605 Oct 9 10:09 bbxuser
-rw——- 1 root staff 5126 Oct 9 10:13 bkgr
-rw——- 1 root staff 457 Oct 9 10:19 bloomora
-rw——- 1 root staff 223 Oct 9 10:20 ccuser
-rw——- 1 root staff 1531 Oct 9 11:07 faxuser
-rw——- 1 root other 1317 Oct 9 11:11 group1
-rw——- 1 root other 1139 Oct 9 11:12 root
-rw——- 1 root staff 162 Oct 9 11:14 u5269
-rw——- 1 root staff 340 Oct 9 11:15 u6013
-rw——- 1 root staff 15539 Oct 9 11:16 u6344
-rw——- 1 root staff 4881 Oct 9 11:18 u6398
-rw——- 1 root staff 9568 Nov 26 21:21 excel
-rw——- 1 root dba 13098 Dec 19 13:30 oracle
sunflower1/800P>
Here you can see that oracle user’s cron is changed at Dec 19, 2007 at 13:30.