tldr/pages/osx/opensnoop.md
2017-10-27 09:33:43 +05:30

360 B

opensnoop

Tool that tracks file opens on your system.

  • Print all file opens as they occur:

sudo opensnoop

  • Track all file opens by a process by name:

sudo opensnoop -n {{process_name}}

  • Track all file opens by a process by PID:

sudo opensnoop -p {{PID}}

  • Track which processes open a specified file:

sudo opensnoop -f {{path/to/file}}