We caught a slow SQL Server query way too late. How do teams usually investigate this?