There was a hardening guide in the older parts of the forum.
Here you go
Its a bit old, Basically turn on all protections that you can in the Windows Defender setting and try to set the highest protection setting possible.
Turn on Bitlocker encryption if you can. Do be careful though and read more on this because there could be some gotchas that could lock you out if something along the encryption chain fails.