A security and risk team requires a weekly report to detect VM file system changes and validate the integrity of the OS. Which of the following is the BEST solution for this requirement?

While a FIM agent specifically monitors file integrity, configuring general system debugging, which often encompasses more extensive event logging, might provide a broader data set for validating overall OS integrity beyond just file hashes.

Enabling debugging on the VM can activate deep system-level logging, capturing granular events related to file system operations and system state changes. Forwarding these extensive debug syslogs to a central location provides the data necessary for comprehensive analysis and the creation of weekly reports on integrity validation.

An antivirus agent primarily focuses on identifying and mitigating malicious software, which is a different function than systematically reporting file system changes and validating OS integrity.

Although a FIM agent is suitable for file integrity monitoring, the combination of detailed debugging logs and centralized syslog forwarding may offer a more comprehensive approach for broad OS integrity validation and flexible report generation.