Text this: Survey of attack and detection based on the full life cycle of APT