How to Prioritize and Segregate 310K SPNs for Security Review?

I have around 310K SPNs from AD, covering users, service accounts, and computers, including FQDN, non-FQDN, and IP-based SPNs. I’ve also validated them against AD and DNS.

Since the dataset is huge, what’s the best way to start segregating and prioritizing the SPNs for a security review?

Should I start with users vs. service accounts vs. computers, OU-based segregation, or some other approach?

Looking for a practical approach from anyone who has handled a large-scale SPN review.