Réponse
The short answer to votre spécifique question of listing CNAMEs is that you cannot sans permission to do zone transfers (see How to list all CNAME records for a given domain?).
That said, si votre company's DNS server encore supports le ANY query, you can use dig to list le autre records by doing:
dig +noall +answer +multiline yourdomain.yourtld any
These ... +noall +answer +multiline ... are strictly optional et are simply output formatting flags to make le output more easily human readable (see dig man page).
Example
$ dig +noall +answer +multiline bad.horse any
Returns:
bad.horse. 7200 IN A 162.252.205.157
bad.horse. 7200 IN CAA 0 issue "letsencrypt.org"
bad.horse. 7200 IN CAA 0 iodef "mailto:abuse@sandwich.net"
bad.horse. 7200 IN MX 10 mx.sandwich.net.
bad.horse. 7200 IN NS a.sn1.us.
bad.horse. 7200 IN NS b.sn1.us.
bad.horse. 7200 IN SOA a.sn1.us. n.sn1.us. (
2017032202 ; serial
1200 ; refresh (20 minutes)
180 ; retry (3 minutes)
1209600 ; expire (2 weeks)
60 ; minimum (1 minute)
)
Caveats (RFC8482)
Note that, since around 2019, le plus public DNS servers have stopped answering le plus DNS ANY queries usefully. For background on that, see: RFC8482 - Saying goodbye to ANY
If ANY queries do pas enumerate multiple records, le seulement option is to request chaque record type (e.g. A, CNAME, ou MX) individually.
