---
type: "mapping-set"
title: "Sigma rules → #6 Flooding Attack"
description: "5 Sigma rules entries mapped to TLCTC #6 Flooding Attack."
resource: "tlctc:mapping:sigma:cluster-6"
tags:
  - "mapping"
  - "sigma"
  - "cluster-6"
---
# Sigma rules → #6 Flooding Attack

> Source: SigmaHQ rules → TLCTC mapping (`mappings/sigma/`). Derived via ATT&CK technique mapping.

Mapped entries: **5**. Cluster: [#6 Flooding Attack](/clusters/cluster-6.md).

| Rule | Techniques | Cluster set | Status |
|---|---|---|---|
| Deployment Deleted From Kubernetes Cluster | T1498 | #6 | ok |
| OpenCanary - NTP Monlist Request | T1498 | #6 | ok |
| Apache Segmentation Fault | T1499 | #6 | ok |
| Nginx Core Dump | T1499 | #6 | ok |
| NTFS Vulnerability Exploitation | T1499 | #6 | ok |
