Resilience for many of us comes from our ability to restart applications in the face of failure. We as debuggers and operators are often forced to go back and analyze clues left behind to tease out root-cause from assets like logs, heap dumps, or even core dumps. As our systems grow, and become more distributed, these one-off investigations become less tenable and a scalable way to analyze incidents after-the-fact is needed. In this talk, we'll explore examples of real-world incidents where scalable post-mortem analysis enabled unobtrusive investigation without affecting system resilience and look into what other opportunities post-mortem analysis methods can offer.