If you want to log all file accesses start the terminal, switch to root-user and type
fs_usage -w -f filesys > cap.txt
Every file access will be logged to cap.txt. You can grep, view edit for post analysis.
tech notes
If you want to log all file accesses start the terminal, switch to root-user and type
fs_usage -w -f filesys > cap.txt
Every file access will be logged to cap.txt. You can grep, view edit for post analysis.