Try run apropos dtrace for its usage.
- io--
iosnoop,hfsslower.d - exec--
execsnoop,opensnoop - all--
dtruss
- how-to-trace-a-program-from-its-very-beginning-without-running-it-as-root on stackoverflow
- some dtrace scripts
- dtrace book
- Use
opensnoopwhich is a dtrace script. Try to runsudo opensnoop(you can redirect the output) and open your targeted app. - Use
fs_usageto monitor file system changes.(Too mush logs)