Lakewright solutions / brief
Inventory a corporate file share (SMB/NFS) into Apache Iceberg
A departmental file server — years of Excel dumps, CSV exports, PDFs, and vendor drops on an SMB or NFS share — becomes a complete, audited inventory in an afternoon: every feed identified, schemas profiled, PII flagged, and the valuable tables landed in Iceberg.
How do consultants use this?
As the engagement itself: the scan report IS the data-stack assessment deliverable — what exists, what it is, what's sensitive, what's duplicated, what's worth landing. Then the client keeps the tool running on what you found.
How are shares accessed?
Via the OS mount (the layer that already does Kerberos/NTLM auth and reconnects properly): mount -t cifs //server/share /mnt/x -o ro or mount_smbfs on macOS, then lakewright scan /mnt/x. Read-only mounts are respected — the scan never writes to the source.
The steps
mount -t cifs //fileserver01/finance /mnt/finance -o ro,user=analyst lakewright scan /mnt/finance # the assessment report lakewright plan /mnt/finance --out plans lakewright approve plans/ap_invoices.plan.yaml lakewright load plans/ap_invoices.plan.yaml --rest $CATALOG
FAQ
The question that matters
"Where is customer and patient data sitting outside the systems we sanctioned?"
The slide that ends the meeting.
Because the scan recorded sensitive-column candidates, formats, modification times and locations as *data* rather than as a PDF report, the assistant answered by share and folder: which paths hold files with identifier-shaped columns, how recently they were touched, and how many files are involved. In a typical estate the answers cluster in a few forgotten places — a departmental share from a migration that was never finished, an exports folder feeding a tool nobody owns any more, a personal directory holding a copy of something that should never have been copied.
The value is not the shock. It is that the finding is queryable, so the follow-up in three months — did we actually clean this up? — is a re-run rather than a re-audit.
Want this run against your data?
We start with a read-only scan and an inventory report — no installation on your systems, nothing leaves your environment. Most engagements produce findings the team didn't know about in the first afternoon.