Tag endpoint protection against LNK threats