A prototype that shows how to use EndpointSecurity framework to trace files - View it on GitHub