@carl fish, I like your configuration set up as well as the recommendations you've taken as your own.
Thank you for sharing them!
As The Captain whom is "Awesome" just shared, we are reasonably held to just one thread for our configurations. It's less complicated this way.
As you are wisely using Zemana Antimalware as an on demand scanner, for an
anti-exploit real time zero day protection you may consider a software I use:
You can try the full version for 30 days which I have used on both my wife's and my own systems also implementing Jack's recommended set up:
...and after the trial expires, even if you opt not to continue it's paid anti-ransomware feature, it's anti-exploit plus encryption protection for the keyboard continues.