dtruss requires disabling SIP. This seems like a better option for basic "what just happened?" debugging.