Use Snowflake Interfaces and tools based on use cases

An analyst is investigating a successful query that they ran ten minutes ago in Snowsight. The query profile is available. It shows that an Aggregate operator accounts for most execution time, while its TableScan operators finish quickly. The analyst wants evidence of whether that Aggregate operator's intermediate data exceeded available memory. Which inspection should the analyst perform?