Most things already mentioned in the comments here, plus: - Disabling Windows Script Host - Enabling 'Memory integrity' feature under Core Isolation. This how

Most things already mentioned in the comments here, plus: - Disabling Windows Script Host - Enabling 'Memory integrity' feature under Core Isolation. This however uses Hyper-V so it is enabled on my laptop but not on my workstation as Hyper-V only supports enhanced sessions with Ubuntu.