You start with an official Windows ISO from Microsoft. You aren't downloading a modified file from a third party; you are applying a script to an official one.
Ghost Spectre OS disables many security features by default. Applying this playbook to a machine connected to the internet—especially one handling sensitive data—exposes it to malware, ransomware, and remote exploits. ghost spectre playbook
The playbook covers various exploitation and post-exploitation techniques, including: You start with an official Windows ISO from Microsoft