@harlan4096
Yes: AV+Firewall(no wfp)+HIPS with Keystroke Encyption and with ps1,vbs, cmd disabled (ask mode)
Smartscreen: theres no need to enable it, see above. You dont need it.
Backups: with macrium weekly. Backups are made to external HDD. External backup folder is protected by Spyshelter folder protection.
Update: i'll update to 1809 when its available via windows update
Suspicious files, if some, are ran with spyshelter resstriced mode aka "poor mans sandbox" which prevents any write access to windir
.sepi