CmdID / Commands
opensnoop
Track file opens on your system. tldr-pages
On macOS
Print all file opens as they occur
Track all file opens by a process by name
sudo opensnoop -n "process_name"Identify
Track all file opens by a process by PID
Track which processes open a specified file