A January 2016 presentation from the U.S. Computer Emergency Readiness Team Cyber Threat Information Sharing Branch regarding their operations investigating and countering botnets.
Department of Homeland Security
(U//FOUO) US-CERT Botnet Operations Presentation