-The Microsoft 365 Reports dashboard shows you the activity overview across the products in your organization. It enables you to drill in to individual product level reports to give you more granular insight about the activities within each product. Check out [the Reports overview topic](activity-reports.md). In the Microsoft Teams app usage report, you can gain insights into the Microsoft Teams apps that are used in your organization.

-## How to get to the Microsoft Teams app usage report

-## Interpret the Microsoft Teams app usage report

-|Supervised users <br> Excluded users | Distribution groups <br> Microsoft 365 Groups | Dynamic distribution groups <br> Nested distribution groups <br> Mail-enabled security groups <br> Microsoft 365 groups with dynamic membership |

-## May 2022

-### Communication compliance

-### Compliance Manager

-### Compliance offerings & service assurance

-### Data lifecycle management and records management

-### Data loss prevention

-### Information barriers

-### Insider risk management

-### Microsoft Priva

-### Sensitive Information Types

-### Sensitivity labels

- - Label SQL database columns by using the same sensitivity labels as those used for files and emails so that the organization has a unified labeling solution that continues to protect structured data when it's exported

- - Apply a sensitivity label to a file after receiving an alert that content containing personal data is being shared and needs protection

-> This section references code examples that are contained in the [ContractTileFormatting.json](https://github.com/pnp/syntex-samples/blob/main/scenario%20samples/Contracts%20Management/View%20Formatter/ContractTileFormatting.json) file that is included in the [Contracts Management Solution Assets repository](https://github.com/pnp/syntex-samples/tree/main/scenario%20samples/Contracts%20Management).

-The custom tile view you use requires you to make changes to the JSON file used to format the current tile view. You can reference the JSON file used to create the card view by looking at the [ContractTileFormatting.json](https://github.com/pnp/syntex-samples/blob/main/scenario%20samples/Contracts%20Management/View%20Formatter/ContractTileFormatting.json) file. In the following sections, you'll see specific sections of the code for features that are in the contract cards.

-In the [ContractTileFormatting.json](https://github.com/pnp/syntex-samples/blob/main/scenario%20samples/Contracts%20Management/View%20Formatter/ContractTileFormatting.json) file, look at the following section to see the code for how the size and shape of the card is formatted.

-The following code lets you define the status of each title card. Note that each status value (*New*, *In review*, *Approved*, and *Rejected*) will display a different color code for each. In the [ContractTileFormatting.json](https://github.com/pnp/syntex-samples/blob/main/scenario%20samples/Contracts%20Management/View%20Formatter/ContractTileFormatting.json) file, look at the section that defines the status.

-In the [ContractTileFormatting.json](https://github.com/pnp/syntex-samples/blob/main/scenario%20samples/Contracts%20Management/View%20Formatter/ContractTileFormatting.json) file, the following sections define each of these.

-#### [Device timeline event flags](device-timeline-event-flag.md)

-## [Enterprise IoT security]()

-### [Securing IoT devices in the enterprise]()

-### [Onboard an Enterprise IoT plan on your Azure subscription]()

-### [Onboard Enterprise IoT sensors]()

-### [Manage Enterprise IoT plans]()

-| [Microsoft Defender Antivirus](microsoft-defender-antivirus-windows.md) <br/>[Defender for Endpoint Plan 1 or Plan 2](defender-endpoint-plan-1-2.md) | - [Automatic exclusions](#automatic-exclusions) (for Windows Server 2016 and later) <br/>- [Custom exclusions](#custom-exclusions), such as process-based exclusions, folder location-based exclusions, file extension exclusions, or contextual file and folder exclusions<br/>- [Custom remediation actions](#custom-remediation-actions) based on threat severity or for specific threats <br/><br/> *The standalone versions of Defender for Endpoint Plan 1 and Plan 2 don't include server licenses. To onboard servers, youΓÇÖll need another license, such as [Microsoft Defender for Servers Plan 1 or 2](/azure/defender-for-cloud/defender-for-servers-introduction). If you're a small or medium-sized business using Defender for Endpoint Plan 1 or [Microsoft Defender for Business](../defender-business/mdb-overview.md), you can get [Microsoft Defender for Business servers](../defender-business/get-defender-business-servers.md).* |

-There might be a delay of up to 12 hours from the time a media connection occurs to the time the event is reflected in the card or in the domain list.

-description: Use Microsoft Defender for Endpoint device timeline event flags to

-# Microsoft Defender for Endpoint device timeline event flags

-Event flags in the Defender for Endpoint device timeline help you filter and organize specific events when you're investigate potential attacks.

-1. Find the event that you want to flag

-## IP Worldwide and Reverse DNS names

-The IP address details section shows attributes of the IP address such as its ASN and its Reverse DNS names.

-## IP in organization

-The **IP in organization** section provides details on the prevalence of the IP address in the organization.

-## Most recent observed devices with IP

-The **Most recent observed devices** with IP section provides a chronological view on the events and associated alerts that were observed on the IP address.

-1. Select **IP** from the **Search bar** drop-down menu.

-2. Enter the IP address in the **Search** field.

-3. Click the search icon or press **Enter**.

-Details about the IP address are displayed, including: registration details (if available), reverse IPs (for example, domains), prevalence of devices in the organization that communicated with this IP Address (during selectable time period), and the devices in the organization that were observed communicating with this IP address.

-1. In the navigation pane, select **Settings** \> **Endpoints** \> **Rules** \> **Automation folder exclusions**.

-#### Microsoft Defender Vulnerability Management improvement actions

-For improvement actions in the "Device" category, you can't choose statuses. Instead, you'll be directed to the associated [Microsoft Defender Vulnerability Management security recommendation](/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation) in the Microsoft 365 Defender to take action. The exception you choose and justification you write will be specific to that portal. It won't be present in the Microsoft Secure Score portal.