SOC analysts, How do you make sure an alert is a false positive?

How do you make sure an alert is a false positive? How confident are you when making the false positive decision? What makes you more confident or provides confidence?

alert analysts cybersecurity decision false positive making soc