List every corporate mail platform, marketing provider, ticketing system, CRM, scanner, application, website, alerting service and third party that sends mail using your domains.
For each, record visible From domains, envelope domains, DKIM signing domains/selectors, source infrastructure, owner, purpose and expected volume. This inventory becomes the basis for SPF cleanup and DMARC enforcement.