This breakpoint is very simple and allows the processor to execute one instruction only from the program, before returning back to the debugger.
This breakpoint is done by modifying a flag in a register called EFlags. This breakpoint could be detected by malware to detect the presence of a debugger, which we will cover in the anti-reverse engineering tricks in Chapter 5, Bypassing Anti-Reverse Engineering Techniques.