If you employ a certain number of people, it's assumed that they're doing other things. When you have to devote them to a different project, you're doing a few things:
1. Making your staff work overtime.
2. Leaving other work undone.
3. Hiring new staff to make up for this.
4. Keeping redundant personnel on board in case something like this happens again.
5. Hiring temporary contractors and services to help you with this specific task.
the salaries for staffing a coordinated multinational police investigation and possible computer forensics contractors?
All of the following need to be paid:
Police agency in country where DDoS target resides, police agency in country where criminal resides, police agency in countries where dummy computers reside, etc?
200k was a random number but i doubt it's necessarily cheap to find any random DDoS-starter
