fatrace
Report file access events. tldr-pages
On Linux
Linux
Print file access events in all mounted filesystems to stdout
sudo fatraceIdentifyLimit output to a program with a specific name
sudo fatrace --command program_nameIdentifyPrint file access events on the mount of the current directory to stdout
sudo fatrace --current-mountIdentifyAdd timestamps to the printout
sudo fatrace --timestampIdentify