diff --git a/rule-packs/gcp.json b/rule-packs/gcp.json
index ccfb8d4..38a3b6b 100644
--- a/rule-packs/gcp.json
+++ b/rule-packs/gcp.json
@@ -5,7 +5,7 @@
       "queries": [
         {
           "name": "query0",
-          "query": "find google_user with email !$='@{{domain}}'",
+          "query": "FIND google_user WITH email !$='@{{domain}}'",
           "version": "v1"
         }
       ]