The dataset contains Android device behavior data collected from a physical device to support detection of multi-stage APT attacks. It includes resource usage features (CPU, RAM, battery, RX, TX, traffic) and app-level features (permissions, sensors, services), covering multi APT stages like Initial Access, Credential / Privilege, and Exfiltration.