minor comments cleanup
update sophos extractor per ontology