macOS / binaries /

execsnoop

/usr/bin/execsnoop
Snoop new process execution

execsnoop prints details of new processes as they are executed. Details such as UID, PID and argument listing are printed out.

source: man