a decent collection of mac osx terminal commands over at superuser.

particularly useful:

opensnoop
history
history | grep something
mdls
mdfind -live something


use the ‘man’ to get more info on each of the above.