macOS / binaries /

opensnoop

/usr/bin/opensnoop
Snoop file opens as they occur

opensnoop tracks file opens. As a process issues a file open, details such as UID, PID and pathname are printed out.

source: man