curl --location 'https://actions.amplifiersecurity.io/automox/actions/explode' \
--header 'Content-Type: application/json' \
--data '{
    "token": "{{add-your-token-here}}",
    "actionUrl": "https://console.automox.com/api/policies/{{policyId}}/action?o={{orgId}}",
    "filter": {
        "device_filters": [
            {
                "field": "serial_number",
                "op": "like_any",
                "value": [
                    "{{asset.serialNumber}}"
                ]
            }
        ],
        "server_groups": [
            {{serverGroupId}}
        ]
    },
    "dryRun": true
}'

Make sure to fill out all of the details in the Body tab.

Testing

Once your values are populated in the Body tab, you can execute the request to see the results. Note the dryRun property on line 18. This means it will just test credentials by running a filtered search against Autmox's API. You should see a success result or details about any failures in the response.

Once you are happy with the filter, you can remove the dryRun flag and run the request again. This should schedule the policy for immediate execution on any device matching the filter. In this case, you will see the outcome for each devices.

Conclusion

Once you are done testing and happy with the results just create a new action Amplifier's Security Hub. If you need detailed instructions, see the end of the Creating an Automox Worklet guide.