The most effective thing that can be done to mitigate the use of these types of tools internally is to create a strong Acceptable Use Policy. Then, once approved by deciding authorities, enforce it by having employees sign it.
You should have two AUP documents in place, one for regular end-users, and one (or an additional one) for IT users. This allows you to control which users are allowed to have these types of tools installed.
If you are worried about these types of tools being used against your own network internally, I would recommend full-disk encryption on the machines that have them installed, and have the users shut the machines down after business hours are over.
If you are looking for a technical resource, I would recommend application white-listing. In our organization, we simply use a spice works report once daily to let us know about any applications on our network. Though not a complete solution, it helps us stay on top of things.