I know I can view the open files of a process using lsof at that moment in time on my Linux machine. However, a process can open, alter and close ...
Try doing this as a starter : lsof -p
Using the strace command it migh be possible with something like : strace -e trace=open program [arguments].
To see open files, we can use the lsof utility. It stands for “list open files” and definitely reveals its purpose. It can really show any type of open files, ...
Continuously monitor files opened/accessed by a process · linux display process lsof. lsof -p 12345 will list all the files opened by process whose pid is 12345 but ...
You can trace a running process, or instruct strace to start it for you.
Read Also: How to Audit Linux Process Using 'autrace' on CentOS/RHEL
The Linux lsof command lists information about files that are open by processes running on the system. The lsof command itself stands for “list ...
Use the LiSt Open Files (LSOF) utility to track data flow related to ports,
Commands from the audit or the inotify-tools package can track file access. See my answer to a very similar question: Unix - Historically who all opened a ...