Right on the spot for FIRST 2017's submission deadline, after more than four years of investigation, a long planned and truly international cooperation effort initiated by German prosecutors, supported by numerous LE agencies, and many, many global partners from the public and private sector, dismantled the ‘Avalanche’ botnet. We will talk about the challenges of a cross-jurisdictional botnet takedown and present how CERT-Bund and BSI supported the operation. In this context we will specifically cover the analysis effort, Avalanche's internals, as well as establishing processes and the 'machinery' behind that helped us to seize, sinkhole or block 800 000 fast flux domains and report sinkhole data to national + international network operators/providers We will further explain how abuse automation systems maintain a crucial role in order to facilitate botnet takedowns and specifically cover the current status of our IntelMQ setup.