You'll get many varied opinions, easiest is just using Microsoft Defender augmented with either Configure Defender or DefenderUI, add browser extensions such a Ublock and Malwarebytes Browse Guard, set your DNS to something like Quad9 or Cloudfare and use your brain in watching what you install and what you click on. Read this forum for a week or so and you'll get lots of good ideas.