If A NOC refuses to obey the law and investigate on behalf of a paying client that DoS has occurred than they become party to a criminal act after the fact and are as guilty as the originator of the attack and can be held accountable and their staff can arrested and you have the right to sue for $4000.00 as do each one of your individual customers.

The catch in there is "paying client". The typical smurf packet hops through several organizations (ISPs). The victim only has a contract with his ISP. Where did $4K come from? Do you have a URL describing that law?