[mzltest]

Main PC
OS: Windows 10 Enterprise 20H2 64 Bit.
Antivirus: Windows Defender Antivirus (builtin) + common sense.
Firewall: Windows Defender Firewall (builtin).
Virt: Windows Hyper-V Hypervisor running whatever OS currently needed to test / play around with.
HIPS: Windows Defender Tamper Protection / Anti Ransomware and TPM hardware protection.
Encryption: Microsoft BitLocker full disk encryption for OS and data SSDs. VeraCrypt for portable data storage.

Notebook
OS: Linux Mint 20 64 Bit.
Antivirus: None + common sense.
Firewall: I reckon it is most likely iptables / ufw (iptables frontend for easier configuration).
Virt: None. Notebook too weak.
HIPS: None and TPM hardware protection.
Encryption: Full disk encryption using LUKS. VeraCrypt for portable data storage.


Before the OS firewall comes the router firewall which covers all devices. For backup I mostly use Acronis True Image. Overall nothing special to see here.

I don't know much on security,but it seems that's a very professional solution.It seems you prefer encrypting your data. That's a good measure as recently ransomware tends to "steal and make public" sensitive data.

As far as I know,according to Hatching Triage's recent analysis,"stealer" is one of the most popular tags.So it seems necessary to secure the data.(Though personally I think thr biggest threats in China is PUA that bundled in software downloads especially in unofficial source...)