fatrace

Report file access events. More information: https://manned.org/fatrace.

• Print file access events in all mounted filesystems to stdout:

sudo fatrace

• Print file access events on the mount of the current directory, with timestamps, to stdout:

sudo fatrace {{[-c|--current-mount]}} {{[-t|--timestamp]}}