macOS / binaries /

iosnoop

/usr/bin/iosnoop
Snoop i/o events as they occur

iosnoop prints I/O events as they happen, with useful details such as UID, PID, block number, size, filename, etc. This is useful to determine the process responsible for using the disks, as well as details on what activity the process is requesting.

source: man