Windows Server 2022 with Update [20348.112] AIO (x64)
Windows Server 2022
This Windows includes the Desktop Experience and Server Core installation options for Datacenter and Standard editions. Security features that are part of the current Windows 10 release (20H2) are now included in Windows Server 2022, like tamper and reputation-based protection.
Its TPM provides storage for security information such as Bitlocker keys, while Secure Boot checks the signatures of all boot software (UEFI firmware, EFI applications and the OS itself) to ensure that they haven’t been subverted by a root kit.
Moreover, The virtualization-based Security (VBS) uses hardware virtualization (based on Hyper-V technology but don’t think of this as a separate VM, just an isolated part of the memory space in the OS) to stop attacks against credentials (Pass-the-Hash / Mimikatz for example).