I had assumed that "Rogue System Detected" was a system with Rogue = True being detected by a sensor on the network, but this doesn't appear to be the case. I setup a task to deploy the McAfee Agent on a Rogue System Detected event where the machine's domain was our domain. However, this appears to trigger for machines which are not listed as Rogues in the Detected Systems area and are listed as managed in the system tree
What triggers this event exactly? Do I need to combine this with the Query for McAfee Agent task to operate effectively?