Skip to main content

macOS Tool that tracks file opens on your system.

# To print all file opens as they occur:
sudo opensnoop

# To track all file opens by a process by name:
sudo opensnoop -n process_name

# To track all file opens by a process by PID:
sudo opensnoop -p PID

# To track which processes open a specified file:
sudo opensnoop -f path/to/file