if you do nothing Windows defender can be enough, but other antivrus has additional features, for instance Avast has self-defense module so that malware do not shutdown Avast, others have external drive scan option upon connecting to desktop or even deny the connection.