And your windows OS update / security patches ?

If it is never connected I would use win defender and MCShield