Our open source mentor Charles Duffy told us about an open source project that he used and an idea for a feature to add to it
What it does
It detects Flocks on files and tracks them while Sysdig is running. File locking provides a very simple yet incredibly useful mechanism for coordinating file accesses. If one process wants to write to a file it tries to grab a lock on a file. This lock prevents other programs from writing or reading the file. Sysdig is open source, system-level exploration: capture system state and activity from a running Linux instance, then save, filter and analyze. Our extension to Sysdig allows it to track flocks.