Blockchain analysis is big business, and all the major companies - Chainalysis, Elliptic, CipherTrace, etc. - will have their own methods and tools for doing so, none of which they will publicize. It all essentially involves linking addresses to each other through various transaction details, and then linking those clusters of address to real people because of KYC, publicly linking an address to their identity, spending habits, IP addresses, and so on.
You can read about all the ways addresses can be linked together here:
https://en.bitcoin.it/wiki/PrivacyBlockchair give a list of how they link addresses together here:
https://blockchair.com/api/docs#link_M6Important to note that these techniques are not perfect, and can be fooled if you know what you are doing or rendered useless by mixing or coinjoining your coins.