Hello Jason, yes you should be able to narrow tht down.
Not sure what version you are running but in version 1.3.1 you can run and audit trail. (See attached Image)
From the Cpam client Click on the Reports tab and select audit trail. This will populate all the latest activity.
you can narrow this down by clicking on filter and then in device field click select and choose the door where this is happening.
See example image
Also depending on how many people you have in your system that have access to issue commands, you could go to each individual and check there audit trail.
Hope this helps.