I am trying to monitor file changes, as well as identify the application that performed them, on OSX. NSWorkspace provides the NSWorkspaceDidPerformFileOperationNotification event, which is perfect for my needs, but it is deprecated in OSX 10.11 with no suggested replacement in the docs. Is there a direct replacement available?
I am aware of FSEvents streams, but for this particular use case the above seems to have a much simpler usage pattern. As far as I currently understand it, fsevent monitoring at the root level is expensive, and monitoring file changes requires explicit caching of directory listings.