The root file system still, at the very least, records access times of all files, so an analysis of the the root file system releals, for all programs, when you last ran them, and for all libraries, when they were most recently loaded, etc. With Linux defaults, IIRC this timestamp has a limitied granularity of a day, but this can be telling enough.