– Use only WinPE builds from Microsoft’s official ADK (Assessment and Deployment Kit) or trusted open-source projects like Hiren’s BootCD PE (which is vetted and widely used).