Workflows are broken up into different functional groups such as tickets being created through the portal or from an email.
SD.Email.Monitor is generally a good place to start for email based tickets
SD.Feeder.GeneralIncidentSubmitForm is a good start for them being created via the portal