A method for security and/or automation systems is described. In one embodiment, the method includes detecting a sound using a microphone, generating an audio signature of the detected sound, comparing the audio signature of the detected sound to an audio signature of a characterized sound, and determining whether a recognizable event occurs based on the comparison. In some embodiments, the microphone is attached to a pipe at the premises.