SANS FOR610 (GREM), FOR572 (GNFA), or FOR528 (Ransomware)?

Given the option to take one course of the listed few, which would you do if you were a DFIR consultant who has already completed GCFA, and GCFR. I am leaning towards GREM and FOR528 but wanted to hear input from others. TIA.

consultant course cybersecurity dfir for572 gcfa input ransomware sans tia