Read How to Investigate like a Rockstar by Sparc Flow. Was pretty mid overall. Centered around analyzing a mainframe compromise. Also I don’t know enough about forensics to really know but I feel like the advice of copying you own programs onto infected machines to take forensic images is probably not a great idea.