FSMON(1)

NAME
fsmon - FileSystem events Monitor

SYNOPSIS
fsmon [-chjfv] [[-a sec]] [[-b dir]] [[-p pid]] [[-P proc]]

DESCRIPTION
This utility wait for events happening in a specific filesystem directory, it allows to filter by pid, path and even create a backup of the modified files.

OPTIONS

-a sec
    stop monitoring after some seconds

-b dir
    backup directory to store the backup

-c  follow children of -p pid

-h  show usage help message

-j  output in JSON

-f  show filename only (no path)

-p pid
    grab events produced by this pid

-P proc
    grab events produced by this process name

-v  show version

USAGE

$ sudo fsmon -a 10 -j | json_pp

AUTHORS

Written by Sergi Alvarez <pancake@nowsecure.com>

Developed at NowSecure '2015

LICENSE

This software is under the MIT license.