How can I figure out what process is assigning incidents to our accounts?
Reports, Audit Log
After checking the Audit Log, I can see that 'Analytics Report' is assigning incidents to one of our accounts.
The below actions from the Audit Log of an incident define a manual process of assigning incidents from a report to a specific account (i.e. right click within the report and select Assign or in-line editing):
The capability of assigning incidents from a report depends on whether the 'Assign' feature is enabled for that report.
Only staff members that have the appropriate access can assign incidents to other accounts.
For additional information, refer to the following:
Answer ID 7879: Assigning Incidents through Reports without Permissions
Answer ID 5482: Unable to assign incidents to other groups using specific profile