Find SPF records that are set to 'Soft Fail' with '~all' instead of the best practice 'Hard Fail' with '-all'
DNS[?RecordType ==
TXT
&& contains(Name,
~all
)].Name