Repeated Maven or Gradle Command Line Execution

Ankit Mehta@Secvyn

•updated Jun 30, 2026•0•0•1

This rule detects repeated execution of 'maven' or 'gradle' commands on a system within a one-hour window. A high count (5 or more) of these commands from the same account on the same computer within an hour could indicate unusual development activity, automated build processes, or potentially malicious activity related to software supply chain compromise or development environment abuse.