metagr0ss@portfolio:~$ whoami

Lance Joseph
De Vera

Computer Science student and CTF competitor focused on digital forensics and blue team operations.

Cyberowls · Forensics & network challenges

metagr0ss / workspace

cat profile.txt

Lance Joseph De Vera
Curiosity. Evidence. Understanding.

BS Computer Science
Universidad de Dagupan

ls ./investigations

Optional navigation. Type help for available commands.

Digital forensics / Blue teamNetwork traffic · Security logs · Memory artifacts

Featured Investigations

Documented blue team training labs exploring attacker activity through security logs, network traffic, and memory artifacts.

Security logsBTLO / lab
BTLO Middle Mayhem training lab

BTLO: Middle Mayhem

SIEM log investigation · Training lab

I used Splunk to investigate suspicious activity against a web application, tracing reconnaissance, authorization-bypass indicators, reverse-shell attempts, and SSH authentication activity.

Evidence & tools

Evidence: SIEM logs and the lab web application.

Tool: Splunk.

Read investigation
Network + memoryCyberDefenders / lab
CyberDefenders Lockdown Lab completion for metagr0ss

CyberDefenders: Lockdown

Network and memory investigation · Training lab

I examined network traffic, a Windows memory image, and a recovered executable to trace an IIS server intrusion, identify a web shell and a suspicious startup executable, and review malware intelligence.

Evidence & tools

Evidence: Packet capture, memory image, and malware sample.

Tools: Wireshark, Volatility 3, and VirusTotal.

Read investigation
Packet captureBTLO / lab
BTLO Network Analysis training lab

BTLO: Network Analysis

Network traffic investigation · Training lab

I analyzed TCP and HTTP traffic in Wireshark to trace port scanning, web enumeration, a web-shell upload, and command-execution activity, identifying indicators at each stage.

Evidence & tools

Evidence: Packet capture.

Tool: Wireshark.

Read investigation

Technical Skills

Network traffic analysis

Tool: Wireshark

  • Filter and inspect TCP, HTTP, and SMB traffic.
  • Identify scanning, web enumeration, and suspicious file-transfer activity.
  • Extract hosts, request paths, and callback details from packet captures.

Security log analysis

Tool: Splunk

  • Write basic SPL searches and aggregate event data.
  • Investigate suspicious web requests and authentication activity.
  • Correlate source IPs, request headers, and accessed endpoints.

Windows memory analysis

Tool: Volatility 3

  • Examine system information and process command lines.
  • Identify suspicious executable paths and startup persistence indicators.
  • Relate host artifacts to activity observed in network traffic.

Malware artifact triage

Tool: VirusTotal

  • Review file metadata, detection results, and reported network relationships.
  • Extract indicators and investigate reported malware-family associations.

Supporting skills

Programming: Python, PHP, Java, and C.

Operating systems: Familiarity with Windows 11, Kali Linux, and Ubuntu.

Experience & Achievements

Cybersecurity experience

Cyberowls — CTF Competitor & Challenge Author

Universidad de Dagupan Cybersecurity Varsity · 2026–present

  • Create original challenges for Cyberowls’ annual CTF competition, which helps identify potential varsity members.
  • Handle digital forensics, network analysis, and related challenge categories during online team competitions.

Network and Security Sub-Organization — Former Chairman

Computer Science and Information Technology Society (CSITS) · 2025–2026

  • Oversaw the sub-organization’s activities and guided members in cybersecurity concepts and CTF problem-solving.
  • Contributed to backend development of NetLearn’s subnetting feature as part of the development team.

Previously: Blue Teamer, CSITS Network and Security Sub-Organization · 2024–2025

Selected CTF results

  • HackForGov 5 Region 1 · August 2026
    1st runner-up, Team Cyberowls Beta · Top 9 individual scorer.
  • Kaspersky CTF · August 2026
    Team Cyberowls: 4th in the Philippines, 40th in Asia.
  • PwnSec CTF · September 2026
    56th overall, Team Cyberowls.
  • Gaslight CTF · August 2026
    28th place, Team Cyberowls.
  • Hack4Gov Region 1 · October 2025
    6th place, Team Cyberowls Beta.

Selected Projects

Networking tools, collaborative platforms, and work in development. Public demos and source links are provided where available.

IP Quiz

Role: Developer

A browser-based IPv4 subnetting calculator and IPv6 practice tool. Generates subnet tables with usable address ranges, broadcast addresses, and calculation steps, alongside IPv6 compression and expansion quizzes.

Tech Stack: HTML, JavaScript, Tailwind CSS

Status: Live demo

NetLearn

Role: Backend Developer, Subnetting Feature

A self-paced networking learning platform featuring interactive diagrams, animated visualizations, and knowledge-check quizzes.

Contributed to backend development of the subnetting feature as part of the development team.

Status: In development

SULOK

Role: Backend Developer & Context Engineer

A study and work environment discovery platform that helps students, freelancers, and remote workers find suitable spaces using community reports on noise, crowding, Wi-Fi, and outlet availability.

Features: Location-based discovery, real-time environment reports, workspace recommendations, route planning, group meetup coordination, and community engagement.

Tech Stack: HTML, CSS, JavaScript, Node.js, PostgreSQL, Leaflet, and OpenStreetMap.

Status: Preparing for deployment

Talakay

Role: Lead Developer

PHP-based community discussion platform.

Tech Stack: PHP, HTML, CSS

Praxis

Role: Back-End Developer

Web3 freelancing platform built with Solidity for smart contracts.

Tech Stack: Solidity, PHP

Recognition: 1st runner-up, Hack the Chain Episode 2, 2025 — Team Praxis.

Nunot

Role: UI/UX Designer

AI-powered educational assistant app for personalized learning.

Tools Used: Figma, Excalidraw

Recognition: Top 10 finalist, SIKAPTala 2025 — Team ByteMe.

About & Education

I’m Lance Joseph De Vera, a Computer Science student at Universidad de Dagupan and a CTF competitor focused on digital forensics and blue team operations. As a member of Cyberowls, the university’s cybersecurity varsity, I develop my investigative skills through competitions and hands-on labs involving network traffic, security logs, and memory analysis. This portfolio brings together my investigations, technical projects, and achievements as I continue exploring how attacks unfold and how defenders uncover them.

Currently learning

  • SOC Operations
  • SIEM (Splunk)
  • Threat Detection
  • Incident Response
  • Python
  • AI/ML

Universidad de Dagupan

Bachelor of Science in Computer Science

2024–present · Expected graduation: 2028

Academic recognition

  • Presidential Scholarship recipient — 2024–present
  • Consistent Dean’s List recognition — 2024–present
  • Outstanding Student Award: Top 1, second-year CS program — 2026
  • Outstanding Student Award: Top 2, first-year CS program — 2024–2025

Training & Credentials

Cisco Network Technician Career Path badge

Network Technician Career Path

Cisco Networking Academy

Learning-path completion badge

Issued

Verify badge
Cisco CCNA: Introduction to Networks badge

CCNA: Introduction to Networks

Cisco Networking Academy

Course completion badge

Issued

Verify badge
Cisco Introduction to Cybersecurity badge

Introduction to Cybersecurity

Cisco Networking Academy

Course completion badge

Issued

Verify badge
Appkademiya digital forensics webinar certificate issued to Lance Joseph De Vera

Digital Forensics: Uncovering the Truth Through Digital Evidence

Appkademiya

Online webinar completion

Issued

View certificate

Contact

Have a question about my investigations, a CTF challenge to discuss, or a project collaboration in mind? Feel free to get in touch.

compose.message

Both fields are required.

10–1,000 characters of plain text. Links are welcome.

Human verification

Complete the checkbox before sending. Verification uses Google reCAPTCHA.