debugging os x

last updated: Oct 20, 2023

In order to use dtrace or dtruss like you'd use strace on linux, you need to disable SIP, which is a pain. There are some tools you can use though, that work with Apple's endpoint security framework:
- here's a video from WWDC about the endpoint security framework

sudo eslogger stat | jq -r 'select(.process.executable.path | test("/git$")) | .event.stat.target.path'

All of them use the same framework, so they all seem to give the same results

↑ up