Rogue Device Detection

Curious what everyone else is doing for rogue device detection? It really seems that this is a job for a NAC / AAA solution, but many seem to want to skimp and go with scripting NMap discovery which seems really easy to thwart as a hacker.

cybersecurity detection device discovery doing hacker job nac nmap rogue scripting solution