An SSID with "direct" in its name is related to screen sharing and WiFi Direct. More than likely some kind of driver has been updated which has added or enabled this functionality. I've not looked into WiFi Direct and weather it is a secure protocol or not. If Air Marshall is able to identify it is a rogue - then it is probably not secure.
... View more