From kitploit.com
Whatfiles is a Linux utility that logs what files another program reads/writes/creates/deletes on your system. It traces any new processes and threads that are created by the targeted process as well.
Whatfiles – Log What Files Are Accessed By Any Linux Process