SOC analysts perform log analysis and digital forensics to understand the nature and scope of security incidents, aiding in attributing attacks and improving overall defenses.