2025-03-14 21:59:59 -06:00
|
|
|
# opensnoop
|
|
|
|
|
|
|
|
|
|
> Track file opens on your system.
|
|
|
|
|
> More information: <https://keith.github.io/xcode-man-pages/opensnoop.1m.html>.
|
|
|
|
|
|
|
|
|
|
- Print all file opens as they occur:
|
|
|
|
|
|
|
|
|
|
`sudo opensnoop`
|
|
|
|
|
|
|
|
|
|
- Track all file opens by a process by name:
|
|
|
|
|
|
|
|
|
|
`sudo opensnoop -n "{{process_name}}"`
|
|
|
|
|
|
|
|
|
|
- Track all file opens by a process by PID:
|
|
|
|
|
|
2026-07-08 16:22:34 -06:00
|
|
|
`sudo opensnoop -p {{pid}}`
|
2025-03-14 21:59:59 -06:00
|
|
|
|
|
|
|
|
- Track which processes open a specified file:
|
|
|
|
|
|
|
|
|
|
`sudo opensnoop -f {{path/to/file}}`
|
