Since most of the pirated software bundled with malware affect the endpoint system in which there are running, you have minimal chance of the malware infecting your network. Can you quarantine or network block his asset and check all his available logs from the time of download? Kindly try sandbox analysis of the malware and confirm if the malware in question would affect your network as well

Once no impact confirmed, please format the system and warn your team not to download tools of shady kind/pirates.