Found great guides here, here and here.

And on a more serious note, the PC Security Channel on YouTube is great. I'd also implement a DNS block list, for instance Hagezi's. Also, do not fiddle with Windows firewall and Windows defender, unless it's in a hardening purpose.

Lastly, if you're willing to spend money on it, I'd use a zero trust solution, which if you ask me is the future of online security for those that aren't very technically inclined. For instance ThreatLocker has great reviews.