I feel like compiling receipts (a list of known/suspected bot accounts) and then following the paper trail would be a good idea... like Wolverine hunting down the school bomber during Civil War