diff --git a/rules/cloud/gcp/gcp_service_account_modified.yml b/rules/cloud/gcp/gcp_service_account_modified.yml
index 172bcc7bb..7905e5037 100644
--- a/rules/cloud/gcp/gcp_service_account_modified.yml
+++ b/rules/cloud/gcp/gcp_service_account_modified.yml
@@ -11,11 +11,11 @@ logsource:
 detection:
     selection:
         gcp.audit.method_name: 
-            - *.serviceAccounts.patch
-            - *.serviceAccounts.create
-            - *.serviceAccounts.update
-            - *.serviceAccounts.patch
-            - *.serviceAccounts.enable
+            - *serviceAccounts.patch
+            - *serviceAccounts.create
+            - *serviceAccounts.update
+            - *serviceAccounts.patch
+            - *serviceAccounts.enable
     condition: selection
 level: medium
 tags: