You can also use the macOS command line utilities "fs_usage" and "lsof". I haven't used these too much, but you can monitor activity on the system. You will likely need to filter the output so only information for the specific volume or drive is displayed.
This example will filter activity related to a drive with a drive identifier of "disk3". You can get the drive identifier for a specific drive from Disk Utility (only filter for a general driveID without the partition/volume ID which would be the "s1", or "s2" part of "disk3s1" for example). You want the drive identifier for the drive or perhaps the Container depending on how the external drive is formatted. For an APFS volume a drive will show a Container which will be attached with another drive identifier. For example the physical drive my be "disk2" while the APFS Container will be attached as "disk3". A mounted volume will be shown with an identifier something like "disk3s2", where we only need the "disk3" part for the filter.
sudo fs_usage | grep -i disk3
It takes a little time for the command to start displaying data and it will only display data when there is activity related to the item you are monitoring. You use Control + C to terminate the command and return to the command prompt.
The above command should work for what you want. The "lsof" command will only be useful if a file is open long enough to be notice when the command is scanning, but there is a delay between scans. The following command will run "lsof" in repeat mode at one second intervals and scanning my external drive with the mounted volume name of "MyExternalHD" which is mounted in the "Volumes" folder (use double quotes to enclose the complete path, but you can also just drag & drop the volume from the Finder onto the open Terminal window after the "+D " which will properly fill in the path for you -- do not use double quotes if auto-filling the path):
sudo lsof -r1 +D "/Volumes/MyExternalHD"
This command will need to be terminated by pressing Control + C as well.
I think I have correctly provided examples. These commands should be able to provide you with information on what is accessing the drive/volume.