fatrace

Report file access events. More information: https://manned.org/fatrace.

• Print file access events in all mounted filesystems to stdout:

sudo fatrace

• Print file access events on the mount of the current directory, with timestamps, to stdout:

sudo fatrace -c|--current-mount -t|--timestamp