I think many of us have been disappointed with the effective demise of
fseventer. What is a good
dtrace shell based alternative to
fseventer that will display all full paths of files being accessed for a defined application?
The command below finds files that have been modified recently. (It's not what the OP asked but it's mostly what I used fseventer for.)
mdimport -A lists the names of other metadata attributes.
kMDItemContentModificationDate is taken from EXIF data for files that have EXIF data. I didn't have many files with
kMDItemUserModifiedDate within the last year, but they were files I had opened with TextEdit, Script Editor, or Skim.
There doesn't seem to be a metadata attribute for access time.
kMDItemAttributeChangeDate is defined as "The date and time of the last change made to a metadata attribute".