Whatfiles is a Linux utility that logs what files other programs read/write/create/delete on your system. It traces any new processes and threads that are created as well.
I've long been frustrated at the lack of a simple utility to see which files a process touches from main() to exit. Whether you don't trust a software vendor or are concerned about malware, it's important to be able to know what a program or installer does to your system. lsof only observes a moment in time and strace is large and somewhat complicated.
basic use, launches ls and writes output to a log file in the current directory: $ whatfiles ls -lah ~/Documents
specify output file location with -o: $ whatfiles -o MyLogFile cd ..
include debug output, print to stdout rather than log file: $ whatfiles -d -s apt install zoom
attach to currently running process (requires root privileges): $ sudo whatfiles -p 1234