Increasing strictness for LNK taste

[phutelmyer]

Describe the change
This change, proposed by @ryanohoro, was identified as ScanLnk was identified matching and running against files that, while matched the YARA rule, were not proper LNK files. This change updates the YARA taste to reduce false positives for ScanLnk execution.

Additional bug identified when scanning LNK files, requiring an update to the construct package.

Describe testing procedures
Tested against several LNK files as well as previously identified false positives.

Sample output
N/A

Checklist

• My code follows the style guidelines of this project
• I have performed a self-review of and tested my code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• My changes generate no new warnings