2017-10-27 06:03:43 +02:00
|
|
|
# opensnoop
|
|
|
|
|
|
2024-02-14 17:25:13 -03:00
|
|
|
> Track file opens on your system.
|
2024-01-31 07:20:27 -03:00
|
|
|
> More information: <https://keith.github.io/xcode-man-pages/opensnoop.1m.html>.
|
2017-10-27 06:03:43 +02:00
|
|
|
|
|
|
|
|
- Print all file opens as they occur:
|
|
|
|
|
|
|
|
|
|
`sudo opensnoop`
|
|
|
|
|
|
|
|
|
|
- Track all file opens by a process by name:
|
|
|
|
|
|
2022-02-14 03:21:43 -08:00
|
|
|
`sudo opensnoop -n "{{process_name}}"`
|
2017-10-27 06:03:43 +02:00
|
|
|
|
|
|
|
|
- Track all file opens by a process by PID:
|
|
|
|
|
|
|
|
|
|
`sudo opensnoop -p {{PID}}`
|
|
|
|
|
|
|
|
|
|
- Track which processes open a specified file:
|
|
|
|
|
|
|
|
|
|
`sudo opensnoop -f {{path/to/file}}`
|
