If an investigator were to plug a suspect's hard drive into a standard Windows PC, the operating system would immediately write metadata, create system logs, and modify timestamps. This compromises the evidence. FTK Imager prevents this, allowing the investigator to create an exact, bit-for-bit copy of the drive.