As a former malware analyst, Windows defender is fine if you don’t go to sketchy sites or do anything risky. You need to keep the database up to date tho. That means letting Windows update when it wants to. Otherwise I always go for malwarebytes. It’s pretty lightweight and not one of the “security suites” that installs a ton of extra features and slows down your computer. Plus it has a 14 day free trial and after it’s over it still works. Just have to run it manually.