@SiempreSteve I don't think you will find anything that doesn't get a bit in your way. For home machines defender would be my go to. Perhaps exclude a few folders from scans if absolutely needed. A lot of malware uses msbuild to compile things on the fly, so whitelisting that is risky. For a corp PC I would go for defender for endpoint (previously ATP) in most cases as well. But EDR solutions are different beasts and often take specialist tuning to get just right.