What is the MAIN role of digital forensics in counterintelligence efforts?

Advanced persistent threat (APT) actors' attack patterns, tools, and techniques are often analyzed using digital forensics techniques for counterintelligence purposes. While these techniques can sometimes be used to ascertain the information that has been stolen, this is not their primary use. Additionally, they are not commonly used as a training tool.