down vote

Try lsof -nP | grep -i deleted It should show you opened but deleted files