Microsoft updates Defender in Windows install media to block threats during setup and close early security gaps.